2026-05-04 01:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16302","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16324","aliyundun_upload_time":"1777827999","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 01:09:43 [Info] TotalPhys:2047,AvailPhys:592,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1227,SelfWorkingSet:16288, SelfPageFile:13464
2026-05-04 01:09:43 [Info] CommitTotal:4672,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:592,SystemCache:301,KernelTotal:259,KernelPaged:174,KernelNonpaged:85,PageSize:4096,HandleCount:27800,ProcessCount:53,ThreadCount:779
2026-05-04 02:05:10 [Info] GetMessage : T_MSG_CHECK
2026-05-04 02:05:10 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4MzE1MTAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODc0NzEwLCJzdWIiOiJSVEFQX0lEWF8xODA3NDVfMTc3NzgzMTUxMDM1MSJ9.vFiEs5gF4Iw3LYGdSL4azMVoIMolbzBzN8wmTVhtKyM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 02:05:14 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 02:05:14 [Info] ipc client:Rtap120611777831514_handler Reg client_name:Rtap120611777831514 on WhiteList
2026-05-04 02:05:14 [Info] start rtap process success, pid is 2848, argument is Rtap120611777831514
2026-05-04 02:05:14 [Info] New ClientConnectNotify : Rtap120611777831514, id is 000001E4
2026-05-04 02:05:15 [Info] ipc client:Rtap120611777831514 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 02:05:15 [Info] Rtap Platform Rtap120611777831514 execv work --sca on pid 2848
2026-05-04 02:05:16 [Info] csrss.exe open proc 2848 AliSecCheck.ex
2026-05-04 02:05:17 [Info] csrss.exe open thread 2848 AliSecCheck.ex
2026-05-04 02:06:00 [Info] get meta data success by v2
2026-05-04 02:06:00 [Info] get empty metaserver config
2026-05-04 02:06:00 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 02:06:00 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 02:06:00 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-04 02:06:01 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-04 02:06:01 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-04 02:06:01 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-04 02:06:01 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 02:06:01 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 02:06:01 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-04 02:06:01 [Info] download cert compare md5 same
2026-05-04 02:06:01 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 02:06:01 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 02:06:01 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-04 02:06:04 [Info] csrss.exe open thread 2848 AliSecCheck.ex
2026-05-04 02:06:38 [Info] Done Work --sca:1
2026-05-04 02:06:38 [Info] Rtap Platform Rtap120611777831514 Exit:normal exit
2026-05-04 02:06:41 [Info] ClientDisConnectNotify : Rtap120611777831514, id is 000001E4
2026-05-04 02:06:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16310","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16412","aliyundun_upload_time":"1777831602","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 02:10:06 [Info] TotalPhys:2047,AvailPhys:605,TotalVirtual:2047,AvailVirtual:1977,TotalPageFile:5900,AvailPageFile:1237,SelfWorkingSet:16392, SelfPageFile:13808
2026-05-04 02:10:06 [Info] CommitTotal:4663,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:605,SystemCache:337,KernelTotal:260,KernelPaged:175,KernelNonpaged:85,PageSize:4096,HandleCount:27816,ProcessCount:53,ThreadCount:782
2026-05-04 03:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16326","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16392","aliyundun_upload_time":"1777835178","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 03:10:30 [Info] TotalPhys:2047,AvailPhys:597,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1234,SelfWorkingSet:16288, SelfPageFile:13568
2026-05-04 03:10:30 [Info] CommitTotal:4665,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:597,SystemCache:341,KernelTotal:260,KernelPaged:175,KernelNonpaged:85,PageSize:4096,HandleCount:27657,ProcessCount:52,ThreadCount:769
2026-05-04 04:06:11 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16282","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16336","aliyundun_upload_time":"1777838771","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 04:10:54 [Info] TotalPhys:2047,AvailPhys:535,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1158,SelfWorkingSet:16204, SelfPageFile:13472
2026-05-04 04:10:54 [Info] CommitTotal:4741,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:535,SystemCache:368,KernelTotal:260,KernelPaged:175,KernelNonpaged:85,PageSize:4096,HandleCount:27654,ProcessCount:52,ThreadCount:771
2026-05-04 05:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16180","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16288","aliyundun_upload_time":"1777842400","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 05:11:19 [Info] TotalPhys:2047,AvailPhys:538,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1156,SelfWorkingSet:16156, SelfPageFile:13436
2026-05-04 05:11:19 [Info] CommitTotal:4744,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:538,SystemCache:370,KernelTotal:260,KernelPaged:175,KernelNonpaged:85,PageSize:4096,HandleCount:27678,ProcessCount:52,ThreadCount:771
2026-05-04 05:22:12 [Info] get meta data success by v2
2026-05-04 05:22:12 [Info] get empty metaserver config
2026-05-04 05:22:12 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 05:22:12 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 05:22:12 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-04 05:22:13 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-04 05:22:13 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-04 05:22:13 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-04 05:22:13 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 05:22:13 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 05:22:13 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-04 05:22:13 [Info] download cert compare md5 same
2026-05-04 05:22:13 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 05:22:13 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 05:22:13 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-04 05:22:13 [Info] nCurrentClock is 432027500, nCurrentTime is 1777843333
2026-05-04 05:22:13 [Info] SendMessage T_MSG_LOGIN
2026-05-04 05:22:13 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-04 05:22:13 [Info] begin to enable self guard after reconnect
2026-05-04 05:22:13 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-04 05:22:13 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-04 05:22:13 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-04 05:22:13 [Info] key : cpu, value : 10
2026-05-04 05:22:13 [Info] key : rio, value : 20480
2026-05-04 05:22:13 [Info] key : wio, value : 20480
2026-05-04 05:22:13 [Info] key : cpu_all, value : 0
2026-05-04 05:22:13 [Info] key : max_pid_check, value : 200
2026-05-04 05:22:13 [Info] key : throw_dump, value : 0
2026-05-04 05:22:13 [Info] key : hash_mode, value : 1
2026-05-04 05:22:13 [Info] key : mem, value : 200
2026-05-04 05:22:13 [Info] can not find key max_fd in online conf
2026-05-04 05:22:13 [Info] key : proc_limit, value : 1
2026-05-04 05:22:13 [Info] key : resource_limit_mode, value : 3
2026-05-04 05:22:13 [Info] key : rtap_update_mode, value : 1
2026-05-04 05:22:13 [Info] can not find key debug in online conf
2026-05-04 05:22:13 [Info] can not find key update_mode in online conf
2026-05-04 05:22:13 [Info] can not find key http_mode in online conf
2026-05-04 05:22:13 [Info] can not find key rtap_enable in online conf
2026-05-04 05:22:13 [Info] can not find key rtap_new_agent in online conf
2026-05-04 05:22:13 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-04 05:22:13 [Info] can not find key mem_low_mark in online conf
2026-05-04 05:22:13 [Info] can not find key obnormal_report_interval in online conf
2026-05-04 05:22:13 [Info] key : cache_mode, value : 0
2026-05-04 05:22:13 [Info] key : abnormal_monitor_mode, value : 3
2026-05-04 05:22:13 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-04 05:22:13 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-04 05:22:13 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-04 05:22:13 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-04 05:22:13 [Info] key : queue_size_ratio, value : 80
2026-05-04 05:22:13 [Info] queue_size_ratio is 80
2026-05-04 05:22:13 [Info] resource limit mode and max limit cpu is not change
2026-05-04 05:22:13 [Info] set hash mode 1
2026-05-04 05:22:13 [Info] RTAP timeout config:9600000
2026-05-04 05:22:13 [Info] self_guard_mode config is 0
2026-05-04 05:22:14 [Info] GetMessage : T_MSG_CHECK
2026-05-04 05:22:14 [Info] task a2e54009-fe0a-40ed-82af-7b6a8eea1453 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 05:22:16 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-04 05:22:17 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 05:22:17 [Info] ipc client:Rtap179021777843337_handler Reg client_name:Rtap179021777843337 on WhiteList
2026-05-04 05:22:17 [Info] start rtap process success, pid is 3220, argument is Rtap179021777843337
2026-05-04 05:22:17 [Info] New ClientConnectNotify : Rtap179021777843337, id is 000004B4
2026-05-04 05:22:17 [Info] ipc client:Rtap179021777843337 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 05:22:17 [Info] Rtap Platform Rtap179021777843337 execv work --windows-sysinfoext-check on pid 3220
2026-05-04 05:22:20 [Info] csrss.exe open proc 3220 AliSecCheck.ex
2026-05-04 05:22:21 [Info] csrss.exe open thread 3220 AliSecCheck.ex
2026-05-04 05:22:24 [Info] Done Work --windows-sysinfoext-check:1
2026-05-04 05:22:24 [Info] Rtap Platform Rtap179021777843337 Exit:normal exit
2026-05-04 05:22:26 [Info] ClientDisConnectNotify : Rtap179021777843337, id is 000004B4
2026-05-04 06:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16239","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"16392","aliyundun_upload_time":"1777845973","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-05-04 06:11:50 [Info] TotalPhys:2047,AvailPhys:482,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1121,SelfWorkingSet:16212, SelfPageFile:13436
2026-05-04 06:11:50 [Info] CommitTotal:4778,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:482,SystemCache:377,KernelTotal:291,KernelPaged:199,KernelNonpaged:92,PageSize:4096,HandleCount:27649,ProcessCount:52,ThreadCount:773
2026-05-04 07:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16225","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16304","aliyundun_upload_time":"1777849575","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 07:12:15 [Info] TotalPhys:2047,AvailPhys:475,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1126,SelfWorkingSet:16208, SelfPageFile:13512
2026-05-04 07:12:15 [Info] CommitTotal:4774,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:475,SystemCache:368,KernelTotal:291,KernelPaged:198,KernelNonpaged:92,PageSize:4096,HandleCount:27756,ProcessCount:52,ThreadCount:767
2026-05-04 07:44:08 [Info] GetMessage : T_MSG_CHECK
2026-05-04 07:44:08 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4NTE4NDgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODk1MDQ4LCJzdWIiOiJSVEFQX0lEWF8xODA3NDdfMTc3Nzg1MTg0ODUwMSJ9.uptczRJR4yZwZTLNqy_cqHCNaVFxwUL3ChLcoj7OjLo has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 07:44:13 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 07:44:13 [Info] ipc client:Rtap129441777851853_handler Reg client_name:Rtap129441777851853 on WhiteList
2026-05-04 07:44:13 [Info] start rtap process success, pid is 4208, argument is Rtap129441777851853
2026-05-04 07:44:13 [Info] New ClientConnectNotify : Rtap129441777851853, id is 00000524
2026-05-04 07:44:13 [Info] ipc client:Rtap129441777851853 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 07:44:14 [Info] Rtap Platform Rtap129441777851853 execv work --windows-vul-clean on pid 4208
2026-05-04 07:44:15 [Info] csrss.exe open proc 4208 AliSecCheck.ex
2026-05-04 07:44:16 [Info] csrss.exe open thread 4208 AliSecCheck.ex
2026-05-04 07:44:21 [Info] Done Work --windows-vul-clean:1
2026-05-04 07:44:21 [Info] Rtap Platform Rtap129441777851853 Exit:normal exit
2026-05-04 07:44:23 [Info] ClientDisConnectNotify : Rtap129441777851853, id is 00000524
2026-05-04 08:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16259","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16344","aliyundun_upload_time":"1777853175","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 08:12:40 [Info] TotalPhys:2047,AvailPhys:477,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1126,SelfWorkingSet:16348, SelfPageFile:13616
2026-05-04 08:12:40 [Info] CommitTotal:4773,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:477,SystemCache:371,KernelTotal:292,KernelPaged:199,KernelNonpaged:92,PageSize:4096,HandleCount:27767,ProcessCount:52,ThreadCount:773
2026-05-04 08:39:50 [Info] get meta data success by v2
2026-05-04 08:39:50 [Info] get empty metaserver config
2026-05-04 08:39:50 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 08:39:50 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 08:39:50 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-04 08:39:50 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-04 08:39:50 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-04 08:39:50 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-04 08:39:50 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 08:39:50 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 08:39:50 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-04 08:39:50 [Info] download cert compare md5 same
2026-05-04 08:39:50 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 08:39:50 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 08:39:50 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-04 08:42:47 [Info] GetMessage : T_MSG_CHECK
2026-05-04 08:42:47 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4NTUzNjcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODk4NTY3LCJzdWIiOiJSVEFQX0lEWF8xODA3MzZfMTc3Nzg1NTM2NzUxNiJ9.wWaL-a7oTG9KiTh94tHGgkRlhtGQuRoae19cPzDwqqA has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 08:42:52 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 08:42:52 [Info] ipc client:Rtap244361777855372_handler Reg client_name:Rtap244361777855372 on WhiteList
2026-05-04 08:42:52 [Info] start rtap process success, pid is 4296, argument is Rtap244361777855372
2026-05-04 08:42:53 [Info] New ClientConnectNotify : Rtap244361777855372, id is 000001E4
2026-05-04 08:42:53 [Info] ipc client:Rtap244361777855372 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 08:42:53 [Info] Rtap Platform Rtap244361777855372 execv work --windows-process-check on pid 4296
2026-05-04 08:42:54 [Info] csrss.exe open proc 4296 AliSecCheck.ex
2026-05-04 08:42:55 [Info] csrss.exe open thread 4296 AliSecCheck.ex
2026-05-04 08:43:16 [Info] Done Work --windows-process-check:1
2026-05-04 08:43:16 [Info] Rtap Platform Rtap244361777855372 Exit:normal exit
2026-05-04 08:43:18 [Info] ClientDisConnectNotify : Rtap244361777855372, id is 000001E4
2026-05-04 09:06:27 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16386","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16540","aliyundun_upload_time":"1777856787","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 09:13:05 [Info] TotalPhys:2047,AvailPhys:459,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1112,SelfWorkingSet:16408, SelfPageFile:13592
2026-05-04 09:13:05 [Info] CommitTotal:4788,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:459,SystemCache:370,KernelTotal:293,KernelPaged:198,KernelNonpaged:95,PageSize:4096,HandleCount:27798,ProcessCount:52,ThreadCount:771
2026-05-04 10:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16411","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16468","aliyundun_upload_time":"1777860370","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 10:13:27 [Info] TotalPhys:2047,AvailPhys:466,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1114,SelfWorkingSet:16456, SelfPageFile:13628
2026-05-04 10:13:27 [Info] CommitTotal:4785,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:466,SystemCache:362,KernelTotal:289,KernelPaged:197,KernelNonpaged:91,PageSize:4096,HandleCount:27710,ProcessCount:52,ThreadCount:768
2026-05-04 10:24:16 [Info] GetMessage : T_MSG_CHECK
2026-05-04 10:24:16 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4NjE0NTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTA0NjU2LCJzdWIiOiJSVEFQX0lEWF83Nl8xNzc3ODA2MDMzMjUzXzQ5MGFmNzhkNmEyODA5YjkxNjFkZDUxNWE2ODE1ZTQzIiwic3ViIjoiUlRBUF9JRFhfMTgwNzQ0XzE3Nzc4NjE0NTY0ODkifQ.1cvWttN6pZfpeRqrcrJ6awB2CLYbeTJkxN-hPjvtucg has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 10:24:23 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 10:24:23 [Info] ipc client:Rtap115581777861463_handler Reg client_name:Rtap115581777861463 on WhiteList
2026-05-04 10:24:23 [Info] start rtap process success, pid is 1312, argument is Rtap115581777861463
2026-05-04 10:24:23 [Info] New ClientConnectNotify : Rtap115581777861463, id is 00000504
2026-05-04 10:24:23 [Info] ipc client:Rtap115581777861463 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 10:24:23 [Info] Rtap Platform Rtap115581777861463 execv work --windows-registry-check on pid 1312
2026-05-04 10:24:25 [Info] csrss.exe open proc 1312 AliSecCheck.ex
2026-05-04 10:24:25 [Info] GetMessage : T_MSG_CHECK
2026-05-04 10:24:25 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4NjE0NjUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTA0NjY1LCJzdWIiOiJSVEFQX0lEWF8xODA3MzlfMTc3Nzg2MTQ2NTg5OSJ9.1wY6P_t00SwqTGtT0mW8i5DPH6j32JVLeF_QZGYImgw has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 10:24:26 [Info] csrss.exe open thread 1312 AliSecCheck.ex
2026-05-04 10:24:32 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 10:24:32 [Info] ipc client:Rtap115881777861472_handler Reg client_name:Rtap115881777861472 on WhiteList
2026-05-04 10:24:32 [Info] start rtap process success, pid is 4868, argument is Rtap115881777861472
2026-05-04 10:24:32 [Info] New ClientConnectNotify : Rtap115881777861472, id is 000004DC
2026-05-04 10:24:32 [Info] ipc client:Rtap115881777861472 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 10:24:32 [Info] Rtap Platform Rtap115881777861472 execv work --windows-schedule-task-check on pid 4868
2026-05-04 10:24:34 [Info] csrss.exe open proc 4868 AliSecCheck.ex
2026-05-04 10:24:35 [Info] csrss.exe open thread 4868 AliSecCheck.ex
2026-05-04 10:25:00 [Info] Done Work --windows-registry-check:1
2026-05-04 10:25:00 [Info] Rtap Platform Rtap115581777861463 Exit:normal exit
2026-05-04 10:25:02 [Info] ClientDisConnectNotify : Rtap115581777861463, id is 00000504
2026-05-04 10:25:10 [Info] Done Work --windows-schedule-task-check:1
2026-05-04 10:25:10 [Info] Rtap Platform Rtap115881777861472 Exit:normal exit
2026-05-04 10:25:12 [Info] ClientDisConnectNotify : Rtap115881777861472, id is 000004DC
2026-05-04 10:25:25 [Info] GetMessage : T_MSG_CHECK
2026-05-04 10:25:25 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4NjE1MjUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTA0NzI1LCJzdWIiOiJSVEFQX0lEWF83Nl8xNzc3ODA2MDMzMjUzXzQ5MGFmNzhkNmEyODA5YjkxNjFkZDUxNWE2ODE1ZTQzIiwic3ViIjoiUlRBUF9JRFhfMTgwNzUwXzE3Nzc4NjE1MjUxNzMifQ.DV405Ijm7pUZNbGVjbskGKYZu7xVJ6CDkY2qvL7Lw_w has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 10:25:30 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 10:25:30 [Info] ipc client:Rtap117771777861530_handler Reg client_name:Rtap117771777861530 on WhiteList
2026-05-04 10:25:30 [Info] start rtap process success, pid is 2844, argument is Rtap117771777861530
2026-05-04 10:25:30 [Info] New ClientConnectNotify : Rtap117771777861530, id is 00000524
2026-05-04 10:25:30 [Info] ipc client:Rtap117771777861530 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 10:25:31 [Info] Rtap Platform Rtap117771777861530 execv work --windows-driver-version-check on pid 2844
2026-05-04 10:25:32 [Info] csrss.exe open proc 2844 AliSecCheck.ex
2026-05-04 10:25:33 [Info] csrss.exe open thread 2844 AliSecCheck.ex
2026-05-04 10:25:38 [Info] Done Work --windows-driver-version-check:1
2026-05-04 10:25:38 [Info] Rtap Platform Rtap117771777861530 Exit:normal exit
2026-05-04 10:25:40 [Info] ClientDisConnectNotify : Rtap117771777861530, id is 00000524
2026-05-04 10:27:17 [Info] GetMessage : T_MSG_CHECK
2026-05-04 10:27:17 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4NjE2MzcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTA0ODM3LCJzdWIiOiJSVEFQX0lEWF8xODA3MzdfMTc3Nzg2MTYzNzQ0OSJ9.FnZOj8ywPnFmJZB3nKJikXY0x3R095ug3yL0uNvb9tA has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 10:27:22 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 10:27:22 [Info] ipc client:Rtap121431777861642_handler Reg client_name:Rtap121431777861642 on WhiteList
2026-05-04 10:27:22 [Info] start rtap process success, pid is 2920, argument is Rtap121431777861642
2026-05-04 10:27:22 [Info] New ClientConnectNotify : Rtap121431777861642, id is 000004DC
2026-05-04 10:27:23 [Info] ipc client:Rtap121431777861642 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 10:27:23 [Info] Rtap Platform Rtap121431777861642 execv work --tcp-connect-check on pid 2920
2026-05-04 10:27:23 [Info] csrss.exe open proc 2920 AliSecCheck.ex
2026-05-04 10:27:24 [Info] csrss.exe open thread 2920 AliSecCheck.ex
2026-05-04 10:27:34 [Info] Done Work --tcp-connect-check:1
2026-05-04 10:27:34 [Info] Rtap Platform Rtap121431777861642 Exit:normal exit
2026-05-04 10:27:36 [Info] ClientDisConnectNotify : Rtap121431777861642, id is 000004DC
2026-05-04 10:50:27 [Info] nCurrentClock is 450028300, nCurrentTime is 1777863027
2026-05-04 10:50:27 [Info] SendMessage T_MSG_LOGIN
2026-05-04 10:50:28 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-04 10:50:28 [Info] begin to enable self guard after reconnect
2026-05-04 10:50:28 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-04 10:50:28 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-04 10:50:28 [Info] GetMessage : T_MSG_CHECK
2026-05-04 10:50:28 [Info] task a6391b4a-6693-43cf-9416-5bb879a56b05 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 10:50:30 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-04 10:50:30 [Info] key : cpu, value : 10
2026-05-04 10:50:30 [Info] key : rio, value : 20480
2026-05-04 10:50:30 [Info] key : wio, value : 20480
2026-05-04 10:50:30 [Info] key : cpu_all, value : 0
2026-05-04 10:50:30 [Info] key : max_pid_check, value : 200
2026-05-04 10:50:30 [Info] key : throw_dump, value : 0
2026-05-04 10:50:30 [Info] key : hash_mode, value : 1
2026-05-04 10:50:30 [Info] key : mem, value : 200
2026-05-04 10:50:30 [Info] can not find key max_fd in online conf
2026-05-04 10:50:30 [Info] key : proc_limit, value : 1
2026-05-04 10:50:30 [Info] key : resource_limit_mode, value : 3
2026-05-04 10:50:30 [Info] key : rtap_update_mode, value : 1
2026-05-04 10:50:30 [Info] can not find key debug in online conf
2026-05-04 10:50:30 [Info] can not find key update_mode in online conf
2026-05-04 10:50:30 [Info] can not find key http_mode in online conf
2026-05-04 10:50:30 [Info] can not find key rtap_enable in online conf
2026-05-04 10:50:30 [Info] can not find key rtap_new_agent in online conf
2026-05-04 10:50:30 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-04 10:50:30 [Info] can not find key mem_low_mark in online conf
2026-05-04 10:50:30 [Info] can not find key obnormal_report_interval in online conf
2026-05-04 10:50:30 [Info] key : cache_mode, value : 0
2026-05-04 10:50:30 [Info] key : abnormal_monitor_mode, value : 3
2026-05-04 10:50:30 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-04 10:50:30 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-04 10:50:30 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-04 10:50:30 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-04 10:50:30 [Info] key : queue_size_ratio, value : 80
2026-05-04 10:50:30 [Info] queue_size_ratio is 80
2026-05-04 10:50:30 [Info] resource limit mode and max limit cpu is not change
2026-05-04 10:50:30 [Info] set hash mode 1
2026-05-04 10:50:30 [Info] RTAP timeout config:9600000
2026-05-04 10:50:30 [Info] self_guard_mode config is 0
2026-05-04 10:50:34 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 10:50:34 [Info] ipc client:Rtap166881777863034_handler Reg client_name:Rtap166881777863034 on WhiteList
2026-05-04 10:50:34 [Info] start rtap process success, pid is 4820, argument is Rtap166881777863034
2026-05-04 10:50:34 [Info] New ClientConnectNotify : Rtap166881777863034, id is 00000524
2026-05-04 10:50:34 [Info] ipc client:Rtap166881777863034 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 10:50:34 [Info] Rtap Platform Rtap166881777863034 execv work --windows-sysinfoext-check on pid 4820
2026-05-04 10:50:36 [Info] csrss.exe open proc 4820 AliSecCheck.ex
2026-05-04 10:50:37 [Info] csrss.exe open thread 4820 AliSecCheck.ex
2026-05-04 10:50:42 [Info] Done Work --windows-sysinfoext-check:1
2026-05-04 10:50:42 [Info] Rtap Platform Rtap166881777863034 Exit:normal exit
2026-05-04 10:50:44 [Info] ClientDisConnectNotify : Rtap166881777863034, id is 00000524
2026-05-04 11:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16430","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16540","aliyundun_upload_time":"1777863981","aliyundun_write_pid_times":"0","ipc_send_count":"161","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 11:08:36 [Info] GetMessage : T_MSG_CHECK
2026-05-04 11:08:36 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4NjQxMTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTA3MzE2LCJzdWIiOiJSVEFQX0lEWF83Nl8xNzc3ODA2MDMzMjUzXzQ5MGFmNzhkNmEyODA5YjkxNjFkZDUxNWE2ODE1ZTQzIiwic3ViIjoiUlRBUF9JRFhfMTgwNzQxXzE3Nzc4NjQxMTY2MTAifQ.H15DgrG-1J2DM_0rqViCe9EyN8GdRg8Tt_uDEAPahC4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 11:08:42 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 11:08:42 [Info] ipc client:Rtap202411777864122_handler Reg client_name:Rtap202411777864122 on WhiteList
2026-05-04 11:08:42 [Info] start rtap process success, pid is 4536, argument is Rtap202411777864122
2026-05-04 11:08:43 [Info] New ClientConnectNotify : Rtap202411777864122, id is 000004DC
2026-05-04 11:08:43 [Info] Rtap Platform Rtap202411777864122 execv work --windows-autorun-item-check on pid 4536
2026-05-04 11:08:43 [Info] ipc client:Rtap202411777864122 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 11:08:44 [Info] csrss.exe open proc 4536 AliSecCheck.ex
2026-05-04 11:08:45 [Info] csrss.exe open thread 4536 AliSecCheck.ex
2026-05-04 11:08:58 [Info] Done Work --windows-autorun-item-check:1
2026-05-04 11:08:58 [Info] Rtap Platform Rtap202411777864122 Exit:normal exit
2026-05-04 11:09:00 [Info] ClientDisConnectNotify : Rtap202411777864122, id is 000004DC
2026-05-04 11:13:48 [Info] TotalPhys:2047,AvailPhys:488,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1117,SelfWorkingSet:16300, SelfPageFile:13620
2026-05-04 11:13:48 [Info] CommitTotal:4783,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:488,SystemCache:286,KernelTotal:285,KernelPaged:193,KernelNonpaged:92,PageSize:4096,HandleCount:27724,ProcessCount:52,ThreadCount:770
2026-05-04 11:56:01 [Info] get meta data success by v2
2026-05-04 11:56:01 [Info] get empty metaserver config
2026-05-04 11:56:01 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 11:56:01 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 11:56:01 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-04 11:56:01 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-04 11:56:01 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-04 11:56:01 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-04 11:56:01 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 11:56:01 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 11:56:02 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-04 11:56:02 [Info] download cert compare md5 same
2026-05-04 11:56:02 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 11:56:02 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 11:56:02 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-04 12:06:14 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16283","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"7","aliyundun_max_mem":"16360","aliyundun_upload_time":"1777867574","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 12:14:05 [Info] TotalPhys:2047,AvailPhys:491,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1107,SelfWorkingSet:16264, SelfPageFile:13564
2026-05-04 12:14:05 [Info] CommitTotal:4793,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:491,SystemCache:288,KernelTotal:286,KernelPaged:193,KernelNonpaged:92,PageSize:4096,HandleCount:27729,ProcessCount:52,ThreadCount:777
2026-05-04 13:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16252","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16340","aliyundun_upload_time":"1777871185","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 13:14:21 [Info] TotalPhys:2047,AvailPhys:494,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1111,SelfWorkingSet:16252, SelfPageFile:13576
2026-05-04 13:14:21 [Info] CommitTotal:4788,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:494,SystemCache:355,KernelTotal:289,KernelPaged:197,KernelNonpaged:92,PageSize:4096,HandleCount:27703,ProcessCount:52,ThreadCount:768
2026-05-04 14:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16254","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16348","aliyundun_upload_time":"1777874798","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 14:14:37 [Info] TotalPhys:2047,AvailPhys:492,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1109,SelfWorkingSet:16336, SelfPageFile:13568
2026-05-04 14:14:37 [Info] CommitTotal:4790,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:492,SystemCache:344,KernelTotal:287,KernelPaged:195,KernelNonpaged:92,PageSize:4096,HandleCount:27728,ProcessCount:52,ThreadCount:773
2026-05-04 15:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16312","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16356","aliyundun_upload_time":"1777878385","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 15:11:53 [Info] get meta data success by v2
2026-05-04 15:11:53 [Info] get empty metaserver config
2026-05-04 15:11:53 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 15:11:53 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 15:11:53 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-04 15:11:53 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-04 15:11:53 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-04 15:11:53 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-04 15:11:53 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 15:11:53 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 15:11:54 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-04 15:11:54 [Info] download cert compare md5 same
2026-05-04 15:11:54 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 15:11:54 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 15:11:54 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-04 15:14:54 [Info] TotalPhys:2047,AvailPhys:552,TotalVirtual:2047,AvailVirtual:1977,TotalPageFile:6089,AvailPageFile:1354,SelfWorkingSet:16396, SelfPageFile:13780
2026-05-04 15:14:54 [Info] CommitTotal:4734,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:552,SystemCache:248,KernelTotal:258,KernelPaged:172,KernelNonpaged:86,PageSize:4096,HandleCount:27749,ProcessCount:52,ThreadCount:768
2026-05-04 16:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16340","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16396","aliyundun_upload_time":"1777881998","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 16:15:10 [Info] TotalPhys:2047,AvailPhys:557,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1354,SelfWorkingSet:16340, SelfPageFile:13708
2026-05-04 16:15:10 [Info] CommitTotal:4735,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:557,SystemCache:270,KernelTotal:259,KernelPaged:173,KernelNonpaged:86,PageSize:4096,HandleCount:27467,ProcessCount:51,ThreadCount:766
2026-05-04 16:17:07 [Info] nCurrentClock is 468029400, nCurrentTime is 1777882627
2026-05-04 16:17:07 [Info] SendMessage T_MSG_LOGIN
2026-05-04 16:17:07 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-04 16:17:07 [Info] begin to enable self guard after reconnect
2026-05-04 16:17:07 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-04 16:17:08 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-04 16:17:08 [Info] GetMessage : T_MSG_CHECK
2026-05-04 16:17:08 [Info] task 6a789e94-5f0f-4593-b27f-143d083f2335 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 16:17:10 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-04 16:17:10 [Info] key : cpu, value : 10
2026-05-04 16:17:10 [Info] key : rio, value : 20480
2026-05-04 16:17:10 [Info] key : wio, value : 20480
2026-05-04 16:17:10 [Info] key : cpu_all, value : 0
2026-05-04 16:17:10 [Info] key : max_pid_check, value : 200
2026-05-04 16:17:10 [Info] key : throw_dump, value : 0
2026-05-04 16:17:10 [Info] key : hash_mode, value : 1
2026-05-04 16:17:10 [Info] key : mem, value : 200
2026-05-04 16:17:10 [Info] can not find key max_fd in online conf
2026-05-04 16:17:10 [Info] key : proc_limit, value : 1
2026-05-04 16:17:10 [Info] key : resource_limit_mode, value : 3
2026-05-04 16:17:10 [Info] key : rtap_update_mode, value : 1
2026-05-04 16:17:10 [Info] can not find key debug in online conf
2026-05-04 16:17:10 [Info] can not find key update_mode in online conf
2026-05-04 16:17:10 [Info] can not find key http_mode in online conf
2026-05-04 16:17:10 [Info] can not find key rtap_enable in online conf
2026-05-04 16:17:10 [Info] can not find key rtap_new_agent in online conf
2026-05-04 16:17:10 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-04 16:17:10 [Info] can not find key mem_low_mark in online conf
2026-05-04 16:17:10 [Info] can not find key obnormal_report_interval in online conf
2026-05-04 16:17:10 [Info] key : cache_mode, value : 0
2026-05-04 16:17:10 [Info] key : abnormal_monitor_mode, value : 3
2026-05-04 16:17:10 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-04 16:17:10 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-04 16:17:10 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-04 16:17:10 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-04 16:17:10 [Info] key : queue_size_ratio, value : 80
2026-05-04 16:17:10 [Info] queue_size_ratio is 80
2026-05-04 16:17:10 [Info] resource limit mode and max limit cpu is not change
2026-05-04 16:17:10 [Info] set hash mode 1
2026-05-04 16:17:10 [Info] RTAP timeout config:9600000
2026-05-04 16:17:10 [Info] self_guard_mode config is 0
2026-05-04 16:17:14 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 16:17:14 [Info] ipc client:Rtap151581777882634_handler Reg client_name:Rtap151581777882634 on WhiteList
2026-05-04 16:17:14 [Info] start rtap process success, pid is 2084, argument is Rtap151581777882634
2026-05-04 16:17:15 [Info] New ClientConnectNotify : Rtap151581777882634, id is 00000524
2026-05-04 16:17:15 [Info] Rtap Platform Rtap151581777882634 execv work --windows-sysinfoext-check on pid 2084
2026-05-04 16:17:15 [Info] ipc client:Rtap151581777882634 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 16:17:16 [Info] csrss.exe open proc 2084 AliSecCheck.ex
2026-05-04 16:17:17 [Info] csrss.exe open thread 2084 AliSecCheck.ex
2026-05-04 16:17:18 [Info] csrss.exe open thread 2084 AliSecCheck.ex
2026-05-04 16:17:19 [Info] csrss.exe open thread 2084 AliSecCheck.ex
2026-05-04 16:17:20 [Info] csrss.exe open thread 2084 AliSecCheck.ex
2026-05-04 16:17:26 [Info] Done Work --windows-sysinfoext-check:1
2026-05-04 16:17:26 [Info] Rtap Platform Rtap151581777882634 Exit:normal exit
2026-05-04 16:17:28 [Info] ClientDisConnectNotify : Rtap151581777882634, id is 00000524
2026-05-04 17:06:20 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16429","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16468","aliyundun_upload_time":"1777885580","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 17:15:27 [Info] TotalPhys:2047,AvailPhys:548,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1355,SelfWorkingSet:16468, SelfPageFile:13708
2026-05-04 17:15:27 [Info] CommitTotal:4734,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:548,SystemCache:306,KernelTotal:259,KernelPaged:173,KernelNonpaged:86,PageSize:4096,HandleCount:27437,ProcessCount:51,ThreadCount:759
2026-05-04 18:02:07 [Info] GetMessage : T_MSG_CHECK
2026-05-04 18:02:07 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4ODg5MjcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3OTMyMTI3LCJzdWIiOiJSVEFQX0lEWF8xODA4MDZfMTc3Nzg4ODkyNzQ0OCJ9._fmsMQGD2_Av7KND9Ld8eOov8ilaoqk8_uoEJSUFJdg has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 18:02:10 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 18:02:10 [Info] ipc client:Rtap29501777888930_handler Reg client_name:Rtap29501777888930 on WhiteList
2026-05-04 18:02:10 [Info] start rtap process success, pid is 4308, argument is Rtap29501777888930
2026-05-04 18:02:10 [Info] New ClientConnectNotify : Rtap29501777888930, id is 000004DC
2026-05-04 18:02:10 [Info] ipc client:Rtap29501777888930 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 18:02:10 [Info] Rtap Platform Rtap29501777888930 execv work --secnet_rasp_agent on pid 4308
2026-05-04 18:02:11 [Info] csrss.exe open proc 4308 AliSecCheck.ex
2026-05-04 18:02:12 [Info] csrss.exe open thread 4308 AliSecCheck.ex
2026-05-04 18:02:17 [Info] csrss.exe open thread 4308 AliSecCheck.ex
2026-05-04 18:02:21 [Info] Done Work --secnet_rasp_agent:1
2026-05-04 18:02:21 [Info] Rtap Platform Rtap29501777888930 Exit:normal exit
2026-05-04 18:02:25 [Info] ClientDisConnectNotify : Rtap29501777888930, id is 000004DC
2026-05-04 18:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16447","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16472","aliyundun_upload_time":"1777889197","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 18:15:44 [Info] TotalPhys:2047,AvailPhys:535,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1354,SelfWorkingSet:16332, SelfPageFile:13524
2026-05-04 18:15:44 [Info] CommitTotal:4734,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:535,SystemCache:322,KernelTotal:259,KernelPaged:173,KernelNonpaged:85,PageSize:4096,HandleCount:27458,ProcessCount:51,ThreadCount:767
2026-05-04 18:27:43 [Info] get meta data success by v2
2026-05-04 18:27:43 [Info] get empty metaserver config
2026-05-04 18:27:43 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 18:27:43 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 18:27:43 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-04 18:27:43 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-04 18:27:43 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-04 18:27:43 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-04 18:27:43 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 18:27:43 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 18:27:43 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-04 18:27:43 [Info] download cert compare md5 same
2026-05-04 18:27:43 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 18:27:43 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 18:27:43 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-04 19:06:20 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16415","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16544","aliyundun_upload_time":"1777892780","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 19:16:00 [Info] TotalPhys:2047,AvailPhys:516,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1340,SelfWorkingSet:16400, SelfPageFile:13652
2026-05-04 19:16:00 [Info] CommitTotal:4749,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:516,SystemCache:333,KernelTotal:258,KernelPaged:172,KernelNonpaged:86,PageSize:4096,HandleCount:27477,ProcessCount:51,ThreadCount:765
2026-05-04 20:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16412","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16484","aliyundun_upload_time":"1777896373","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 20:16:18 [Info] TotalPhys:2047,AvailPhys:526,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1347,SelfWorkingSet:16392, SelfPageFile:13588
2026-05-04 20:16:18 [Info] CommitTotal:4741,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:526,SystemCache:356,KernelTotal:262,KernelPaged:176,KernelNonpaged:86,PageSize:4096,HandleCount:27453,ProcessCount:51,ThreadCount:761
2026-05-04 21:06:44 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16371","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16484","aliyundun_upload_time":"1777900004","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 21:16:35 [Info] TotalPhys:2047,AvailPhys:540,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1345,SelfWorkingSet:16360, SelfPageFile:13636
2026-05-04 21:16:35 [Info] CommitTotal:4744,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:540,SystemCache:350,KernelTotal:262,KernelPaged:176,KernelNonpaged:85,PageSize:4096,HandleCount:27431,ProcessCount:51,ThreadCount:758
2026-05-04 21:44:03 [Info] get meta data success by v2
2026-05-04 21:44:03 [Info] get empty metaserver config
2026-05-04 21:44:03 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 21:44:04 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-04 21:44:04 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-04 21:44:04 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-04 21:44:04 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-04 21:44:04 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-04 21:44:04 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 21:44:04 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-04 21:44:04 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-04 21:44:04 [Info] download cert compare md5 same
2026-05-04 21:44:04 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 21:44:04 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-04 21:44:04 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-04 21:44:04 [Info] nCurrentClock is 486030400, nCurrentTime is 1777902244
2026-05-04 21:44:04 [Info] SendMessage T_MSG_LOGIN
2026-05-04 21:44:04 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-04 21:44:04 [Info] begin to enable self guard after reconnect
2026-05-04 21:44:04 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-04 21:44:04 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-04 21:44:04 [Info] GetMessage : T_MSG_CHECK
2026-05-04 21:44:04 [Info] task ea3f6869-82a9-4a99-a6fe-cf3c2c92d64a has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-04 21:44:07 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-04 21:44:07 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-04 21:44:07 [Info] key : cpu, value : 10
2026-05-04 21:44:07 [Info] key : rio, value : 20480
2026-05-04 21:44:07 [Info] key : wio, value : 20480
2026-05-04 21:44:07 [Info] key : cpu_all, value : 0
2026-05-04 21:44:07 [Info] key : max_pid_check, value : 200
2026-05-04 21:44:07 [Info] key : throw_dump, value : 0
2026-05-04 21:44:07 [Info] key : hash_mode, value : 1
2026-05-04 21:44:07 [Info] key : mem, value : 200
2026-05-04 21:44:07 [Info] can not find key max_fd in online conf
2026-05-04 21:44:07 [Info] key : proc_limit, value : 1
2026-05-04 21:44:07 [Info] key : resource_limit_mode, value : 3
2026-05-04 21:44:07 [Info] key : rtap_update_mode, value : 1
2026-05-04 21:44:07 [Info] can not find key debug in online conf
2026-05-04 21:44:07 [Info] can not find key update_mode in online conf
2026-05-04 21:44:07 [Info] can not find key http_mode in online conf
2026-05-04 21:44:07 [Info] can not find key rtap_enable in online conf
2026-05-04 21:44:07 [Info] can not find key rtap_new_agent in online conf
2026-05-04 21:44:07 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-04 21:44:07 [Info] can not find key mem_low_mark in online conf
2026-05-04 21:44:07 [Info] can not find key obnormal_report_interval in online conf
2026-05-04 21:44:07 [Info] key : cache_mode, value : 0
2026-05-04 21:44:07 [Info] key : abnormal_monitor_mode, value : 3
2026-05-04 21:44:07 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-04 21:44:07 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-04 21:44:07 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-04 21:44:07 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-04 21:44:07 [Info] key : queue_size_ratio, value : 80
2026-05-04 21:44:07 [Info] queue_size_ratio is 80
2026-05-04 21:44:07 [Info] resource limit mode and max limit cpu is not change
2026-05-04 21:44:07 [Info] set hash mode 1
2026-05-04 21:44:07 [Info] RTAP timeout config:9600000
2026-05-04 21:44:07 [Info] self_guard_mode config is 0
2026-05-04 21:44:07 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-04 21:44:07 [Info] ipc client:Rtap136701777902247_handler Reg client_name:Rtap136701777902247 on WhiteList
2026-05-04 21:44:07 [Info] start rtap process success, pid is 2072, argument is Rtap136701777902247
2026-05-04 21:44:10 [Info] csrss.exe open proc 2072 AliSecCheck.ex
2026-05-04 21:44:10 [Info] New ClientConnectNotify : Rtap136701777902247, id is 00000524
2026-05-04 21:44:11 [Info] Rtap Platform Rtap136701777902247 execv work --windows-sysinfoext-check on pid 2072
2026-05-04 21:44:11 [Info] ipc client:Rtap136701777902247 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-04 21:44:11 [Info] csrss.exe open thread 2072 AliSecCheck.ex
2026-05-04 21:44:18 [Info] Done Work --windows-sysinfoext-check:1
2026-05-04 21:44:18 [Info] Rtap Platform Rtap136701777902247 Exit:normal exit
2026-05-04 21:44:20 [Info] ClientDisConnectNotify : Rtap136701777902247, id is 00000524
2026-05-04 22:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16378","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16452","aliyundun_upload_time":"1777903595","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"73","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 22:16:53 [Info] TotalPhys:2047,AvailPhys:529,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1336,SelfWorkingSet:16324, SelfPageFile:13576
2026-05-04 22:16:53 [Info] CommitTotal:4753,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:529,SystemCache:345,KernelTotal:262,KernelPaged:176,KernelNonpaged:86,PageSize:4096,HandleCount:27448,ProcessCount:51,ThreadCount:767
2026-05-04 23:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16328","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16372","aliyundun_upload_time":"1777907176","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 23:17:10 [Info] TotalPhys:2047,AvailPhys:529,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1346,SelfWorkingSet:16344, SelfPageFile:13604
2026-05-04 23:17:10 [Info] CommitTotal:4742,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:529,SystemCache:348,KernelTotal:262,KernelPaged:176,KernelNonpaged:86,PageSize:4096,HandleCount:27441,ProcessCount:51,ThreadCount:760
2026-05-05 00:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16329","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16356","aliyundun_upload_time":"1777910795","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}