---
title: "Entropy Analysis Session Started"
description: "Sent when a user starts an entropy analysis session for a malware detection event with the Encrypted data type. For more information, see Analyzing Encrypted Data Events."
canonical: "https://helpcenter.veeam.com/docs/vbr/events/event_44200.html"
breadcrumb: "Event Reference > Malware Detection > Entropy Analysis Session Started"
dateModified: "2026-10-01"
---

# Entropy Analysis Session Started

Sent when a user starts an entropy analysis session for a malware detection event with the *Encrypted data* type. For more information, see [Analyzing Encrypted Data Events](https://helpcenter.veeam.com/docs/vbr/userguide/malware_detection_analyze_encryption.html).

## General Information

**Event ID**: 44200

**Event message details**: Entropy analysis has been started for backup `<BackupName>`

**Severity**: Info

## Parameters

<table class="Blue_Table">
  <tr style="vertical-align:top">
    <th>
      <p>Parameter Name</p>
    </th>
    <th>
      <p>Description</p>
    </th>
    <th>
      <p>Example</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">SessionID</span></p>
    </td>
    <td>
      Session ID.
    </td>
    <td>
      <p><span class="T_Filenames">SessionID="0ea5f2b5-a9d4-4431-aa8a-3c7717cfdf5a"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">TargetEventID</span></p>
    </td>
    <td>
      <p>Malware detection event ID.</p>
    </td>
    <td>
      <p><span class="T_Filenames">TargetEventID="2cf4489b-8fe1-479b-bcc3-a673e9fedd13"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">BackupName</span></p>
    </td>
    <td>
      <p>Backup name.</p>
    </td>
    <td>
      <p><span class="T_Filenames">BackupName="Backup Job 01"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">BackupID</span></p>
    </td>
    <td>
      <p>Backup ID.</p>
    </td>
    <td>
      <p><span class="T_Filenames">BackupID="c58a3e17-9b42-4f06-8d51-7ae6b2019f34"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">UserName</span></p>
    </td>
    <td>
      Name of the user who performed an operation.
    </td>
    <td>
      <p><span class="T_Filenames">UserName="TECH\user1"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">UserID</span></p>
    </td>
    <td>
      <p>SID of the user who performed the operation.</p>
    </td>
    <td>
      <p><span class="T_Filenames">UserID="S-1-5-21-670747961-1840839389-3357612639-1134"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">VbrHostName</span></p>
    </td>
    <td>
      Backup server name. Can be a DNS name, an FQDN or an IP address.
    </td>
    <td>
      <p><span class="T_Filenames">VbrHostName="vbrsrv01.tech.local"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">VbrVersion</span></p>
    </td>
    <td>
      Veeam Backup & Replication version.
    </td>
    <td>
      <p><span class="T_Filenames">VbrVersion="13.1.0.411"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Version</span></p>
    </td>
    <td>
      Event version (service parameter).
    </td>
    <td>
      <p><span class="T_Filenames">Version="1"</span></p>
    </td>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p><span class="T_Filenames">Description</span></p>
    </td>
    <td>
      Event message details.
    </td>
    <td>
      <p><span class="T_Filenames">Description="Entropy analysis has been started for backup 'Backup Job 01'."</span></p>
    </td>
  </tr>
</table>

## Syslog Message Example

```
1 2026-07-25T09:14:22.481952+02:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=44200 SessionID="0ea5f2b5-a9d4-4431-aa8a-3c7717cfdf5a" TargetEventID="2cf4489b-8fe1-479b-bcc3-a673e9fedd13" BackupName="Backup Job 01" BackupID="c58a3e17-9b42-4f06-8d51-7ae6b2019f34" UserName="TECH\user1" UserID="S-1-5-21-670747961-1840839389-3357612639-1134" VbrHostName="vbrsrv01.tech.local" VbrVersion="13.1.0.411" Version="1" Description="Entropy analysis has been started for backup 'Backup Job 01'."]
```