2026-04-30 00:31:26 [Info] TotalPhys:2047,AvailPhys:362,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1432,SelfWorkingSet:15888, SelfPageFile:12904
2026-04-30 00:31:26 [Info] CommitTotal:5237,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:362,SystemCache:162,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27676,ProcessCount:52,ThreadCount:759
2026-04-30 01:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15979","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16060","aliyundun_upload_time":"1777482396","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 01:31:43 [Info] TotalPhys:2047,AvailPhys:350,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1428,SelfWorkingSet:16008, SelfPageFile:13216
2026-04-30 01:31:43 [Info] CommitTotal:5241,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:350,SystemCache:169,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27717,ProcessCount:52,ThreadCount:761
2026-04-30 02:05:10 [Info] GetMessage : T_MSG_CHECK
2026-04-30 02:05:10 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0ODU5MTAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTI5MTEwLCJzdWIiOiJSVEFQX0lEWF8xODA0NDRfMTc3NzQ4NTkxMDcyOCJ9.y5irpJewZJTNUbvEqVPni0gVD0XDcf8sIQCansPswxY has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 02:05:13 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 02:05:13 [Info] ipc client:Rtap303541777485913_handler Reg client_name:Rtap303541777485913 on WhiteList
2026-04-30 02:05:13 [Info] start rtap process success, pid is 2656, argument is Rtap303541777485913
2026-04-30 02:05:13 [Info] New ClientConnectNotify : Rtap303541777485913, id is 00000548
2026-04-30 02:05:13 [Info] ipc client:Rtap303541777485913 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 02:05:14 [Info] Rtap Platform Rtap303541777485913 execv work --sca on pid 2656
2026-04-30 02:05:16 [Info] csrss.exe open proc 2656 AliSecCheck.ex
2026-04-30 02:05:17 [Info] csrss.exe open thread 2656 AliSecCheck.ex
2026-04-30 02:05:37 [Info] csrss.exe open thread 2656 AliSecCheck.ex
2026-04-30 02:06:01 [Info] Done Work --sca:1
2026-04-30 02:06:01 [Info] Rtap Platform Rtap303541777485913 Exit:normal exit
2026-04-30 02:06:03 [Info] ClientDisConnectNotify : Rtap303541777485913, id is 00000548
2026-04-30 02:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15976","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16116","aliyundun_upload_time":"1777485981","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 02:31:59 [Info] TotalPhys:2047,AvailPhys:320,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1401,SelfWorkingSet:16012, SelfPageFile:13108
2026-04-30 02:31:59 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:320,SystemCache:175,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27720,ProcessCount:52,ThreadCount:760
2026-04-30 03:02:34 [Info] get meta data success by v2
2026-04-30 03:02:34 [Info] get empty metaserver config
2026-04-30 03:02:34 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 03:02:34 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 03:02:34 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 03:02:34 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 03:02:34 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 03:02:34 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 03:02:34 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 03:02:34 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 03:02:34 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 03:02:34 [Info] download cert compare md5 same
2026-04-30 03:02:34 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 03:02:34 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 03:02:34 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 03:02:34 [Info] nCurrentClock is 108007400, nCurrentTime is 1777489354
2026-04-30 03:02:34 [Info] SendMessage T_MSG_LOGIN
2026-04-30 03:02:34 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-30 03:02:34 [Info] begin to enable self guard after reconnect
2026-04-30 03:02:34 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-30 03:02:35 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-30 03:02:35 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-04-30 03:02:35 [Info] GetMessage : T_MSG_CHECK
2026-04-30 03:02:35 [Info] task 77d8f389-6f92-4ddc-82de-161526f84ed8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 03:02:37 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-30 03:02:37 [Info] key : cpu, value : 10
2026-04-30 03:02:37 [Info] key : rio, value : 20480
2026-04-30 03:02:37 [Info] key : wio, value : 20480
2026-04-30 03:02:37 [Info] key : cpu_all, value : 0
2026-04-30 03:02:37 [Info] key : max_pid_check, value : 200
2026-04-30 03:02:37 [Info] key : throw_dump, value : 0
2026-04-30 03:02:37 [Info] key : hash_mode, value : 1
2026-04-30 03:02:37 [Info] key : mem, value : 200
2026-04-30 03:02:37 [Info] can not find key max_fd in online conf
2026-04-30 03:02:37 [Info] key : proc_limit, value : 1
2026-04-30 03:02:37 [Info] key : resource_limit_mode, value : 3
2026-04-30 03:02:37 [Info] key : rtap_update_mode, value : 1
2026-04-30 03:02:37 [Info] can not find key debug in online conf
2026-04-30 03:02:37 [Info] can not find key update_mode in online conf
2026-04-30 03:02:37 [Info] can not find key http_mode in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_enable in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_new_agent in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-30 03:02:37 [Info] can not find key mem_low_mark in online conf
2026-04-30 03:02:37 [Info] can not find key obnormal_report_interval in online conf
2026-04-30 03:02:37 [Info] key : cache_mode, value : 0
2026-04-30 03:02:37 [Info] key : abnormal_monitor_mode, value : 3
2026-04-30 03:02:37 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-30 03:02:37 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-30 03:02:37 [Info] key : queue_size_ratio, value : 80
2026-04-30 03:02:37 [Info] queue_size_ratio is 80
2026-04-30 03:02:37 [Info] resource limit mode and max limit cpu is not change
2026-04-30 03:02:37 [Info] set hash mode 1
2026-04-30 03:02:37 [Info] RTAP timeout config:9600000
2026-04-30 03:02:37 [Info] self_guard_mode config is 0
2026-04-30 03:02:41 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 03:02:41 [Info] ipc client:Rtap88461777489361_handler Reg client_name:Rtap88461777489361 on WhiteList
2026-04-30 03:02:41 [Info] start rtap process success, pid is 2488, argument is Rtap88461777489361
2026-04-30 03:02:41 [Info] New ClientConnectNotify : Rtap88461777489361, id is 00000524
2026-04-30 03:02:41 [Info] ipc client:Rtap88461777489361 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 03:02:41 [Info] Rtap Platform Rtap88461777489361 execv work --windows-sysinfoext-check on pid 2488
2026-04-30 03:02:42 [Info] csrss.exe open proc 2488 AliSecCheck.ex
2026-04-30 03:02:43 [Info] csrss.exe open thread 2488 AliSecCheck.ex
2026-04-30 03:02:48 [Info] Done Work --windows-sysinfoext-check:1
2026-04-30 03:02:48 [Info] Rtap Platform Rtap88461777489361 Exit:normal exit
2026-04-30 03:02:50 [Info] ClientDisConnectNotify : Rtap88461777489361, id is 00000524
2026-04-30 03:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16089","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16200","aliyundun_upload_time":"1777489597","aliyundun_write_pid_times":"0","ipc_send_count":"149","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 03:32:16 [Info] TotalPhys:2047,AvailPhys:314,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1395,SelfWorkingSet:15948, SelfPageFile:12964
2026-04-30 03:32:16 [Info] CommitTotal:5273,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:314,SystemCache:201,KernelTotal:266,KernelPaged:173,KernelNonpaged:93,PageSize:4096,HandleCount:27908,ProcessCount:53,ThreadCount:772
2026-04-30 04:06:19 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16027","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16172","aliyundun_upload_time":"1777493179","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 04:32:33 [Info] TotalPhys:2047,AvailPhys:325,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1402,SelfWorkingSet:15976, SelfPageFile:13008
2026-04-30 04:32:33 [Info] CommitTotal:5266,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:325,SystemCache:235,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27710,ProcessCount:52,ThreadCount:762
2026-04-30 05:06:11 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16011","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16084","aliyundun_upload_time":"1777496771","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 05:32:50 [Info] TotalPhys:2047,AvailPhys:329,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1406,SelfWorkingSet:16048, SelfPageFile:13132
2026-04-30 05:32:50 [Info] CommitTotal:5262,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:329,SystemCache:243,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27708,ProcessCount:52,ThreadCount:772
2026-04-30 06:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15989","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16096","aliyundun_upload_time":"1777500385","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 06:18:37 [Info] get meta data success by v2
2026-04-30 06:18:37 [Info] get empty metaserver config
2026-04-30 06:18:37 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 06:18:38 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 06:18:38 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 06:18:38 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 06:18:38 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 06:18:38 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 06:18:38 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 06:18:38 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 06:18:39 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 06:18:39 [Info] download cert compare md5 same
2026-04-30 06:18:39 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 06:18:39 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 06:18:39 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 06:33:06 [Info] TotalPhys:2047,AvailPhys:353,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1418,SelfWorkingSet:15932, SelfPageFile:12936
2026-04-30 06:33:06 [Info] CommitTotal:5250,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:353,SystemCache:230,KernelTotal:267,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27690,ProcessCount:52,ThreadCount:762
2026-04-30 07:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16007","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16140","aliyundun_upload_time":"1777503996","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 07:33:23 [Info] TotalPhys:2047,AvailPhys:332,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1408,SelfWorkingSet:15968, SelfPageFile:12992
2026-04-30 07:33:23 [Info] CommitTotal:5260,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:332,SystemCache:224,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27671,ProcessCount:52,ThreadCount:763
2026-04-30 07:45:08 [Info] GetMessage : T_MSG_CHECK
2026-04-30 07:45:08 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MDYzMDgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTQ5NTA4LCJzdWIiOiJSVEFQX0lEWF8xODA0NDZfMTc3NzUwNjMwODE4NiJ9.ilFd3ZEs2qR6V-7PyiyAQsEswdB-ADDYTItRVmVU3Gg has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 07:45:14 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 07:45:14 [Info] ipc client:Rtap314391777506314_handler Reg client_name:Rtap314391777506314 on WhiteList
2026-04-30 07:45:14 [Info] start rtap process success, pid is 4712, argument is Rtap314391777506314
2026-04-30 07:45:14 [Info] New ClientConnectNotify : Rtap314391777506314, id is 000004B4
2026-04-30 07:45:14 [Info] ipc client:Rtap314391777506314 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 07:45:14 [Info] Rtap Platform Rtap314391777506314 execv work --windows-vul-clean on pid 4712
2026-04-30 07:45:17 [Info] csrss.exe open proc 4712 AliSecCheck.ex
2026-04-30 07:45:18 [Info] csrss.exe open thread 4712 AliSecCheck.ex
2026-04-30 07:45:21 [Info] Done Work --windows-vul-clean:1
2026-04-30 07:45:21 [Info] Rtap Platform Rtap314391777506314 Exit:normal exit
2026-04-30 07:45:23 [Info] ClientDisConnectNotify : Rtap314391777506314, id is 000004B4
2026-04-30 08:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15970","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16088","aliyundun_upload_time":"1777507570","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 08:29:09 [Info] nCurrentClock is 126009200, nCurrentTime is 1777508949
2026-04-30 08:29:09 [Info] SendMessage T_MSG_LOGIN
2026-04-30 08:29:09 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-30 08:29:09 [Info] begin to enable self guard after reconnect
2026-04-30 08:29:10 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-30 08:29:10 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-30 08:29:10 [Info] GetMessage : T_MSG_CHECK
2026-04-30 08:29:10 [Info] task f4011c9f-9bd7-4fa1-993a-85b2e3ef83bc has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 08:29:12 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-30 08:29:12 [Info] key : cpu, value : 10
2026-04-30 08:29:12 [Info] key : rio, value : 20480
2026-04-30 08:29:12 [Info] key : wio, value : 20480
2026-04-30 08:29:12 [Info] key : cpu_all, value : 0
2026-04-30 08:29:12 [Info] key : max_pid_check, value : 200
2026-04-30 08:29:12 [Info] key : throw_dump, value : 0
2026-04-30 08:29:12 [Info] key : hash_mode, value : 1
2026-04-30 08:29:12 [Info] key : mem, value : 200
2026-04-30 08:29:12 [Info] can not find key max_fd in online conf
2026-04-30 08:29:12 [Info] key : proc_limit, value : 1
2026-04-30 08:29:12 [Info] key : resource_limit_mode, value : 3
2026-04-30 08:29:12 [Info] key : rtap_update_mode, value : 1
2026-04-30 08:29:12 [Info] can not find key debug in online conf
2026-04-30 08:29:12 [Info] can not find key update_mode in online conf
2026-04-30 08:29:12 [Info] can not find key http_mode in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_enable in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_new_agent in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-30 08:29:12 [Info] can not find key mem_low_mark in online conf
2026-04-30 08:29:12 [Info] can not find key obnormal_report_interval in online conf
2026-04-30 08:29:12 [Info] key : cache_mode, value : 0
2026-04-30 08:29:12 [Info] key : abnormal_monitor_mode, value : 3
2026-04-30 08:29:12 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-30 08:29:12 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-30 08:29:12 [Info] key : queue_size_ratio, value : 80
2026-04-30 08:29:12 [Info] queue_size_ratio is 80
2026-04-30 08:29:12 [Info] resource limit mode and max limit cpu is not change
2026-04-30 08:29:12 [Info] set hash mode 1
2026-04-30 08:29:12 [Info] RTAP timeout config:9600000
2026-04-30 08:29:12 [Info] self_guard_mode config is 0
2026-04-30 08:29:14 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 08:29:14 [Info] ipc client:Rtap72921777508954_handler Reg client_name:Rtap72921777508954 on WhiteList
2026-04-30 08:29:14 [Info] start rtap process success, pid is 1624, argument is Rtap72921777508954
2026-04-30 08:29:14 [Info] New ClientConnectNotify : Rtap72921777508954, id is 0000052C
2026-04-30 08:29:15 [Info] ipc client:Rtap72921777508954 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 08:29:15 [Info] Rtap Platform Rtap72921777508954 execv work --windows-sysinfoext-check on pid 1624
2026-04-30 08:29:17 [Info] csrss.exe open proc 1624 AliSecCheck.ex
2026-04-30 08:29:18 [Info] csrss.exe open thread 1624 AliSecCheck.ex
2026-04-30 08:29:22 [Info] Done Work --windows-sysinfoext-check:1
2026-04-30 08:29:22 [Info] Rtap Platform Rtap72921777508954 Exit:normal exit
2026-04-30 08:29:24 [Info] ClientDisConnectNotify : Rtap72921777508954, id is 0000052C
2026-04-30 08:33:40 [Info] TotalPhys:2047,AvailPhys:325,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1391,SelfWorkingSet:15972, SelfPageFile:12996
2026-04-30 08:33:40 [Info] CommitTotal:5277,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:325,SystemCache:225,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27875,ProcessCount:53,ThreadCount:774
2026-04-30 08:43:21 [Info] GetMessage : T_MSG_CHECK
2026-04-30 08:43:21 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MDk4MDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTUzMDAxLCJzdWIiOiJSVEFQX0lEWF8xODA0MzVfMTc3NzUwOTgwMTAyNiJ9.62ewCZt8T1WzE9CU5YJutQNq43b8mhHUTJH2_O_B0w4 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 08:43:25 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 08:43:25 [Info] ipc client:Rtap100711777509805_handler Reg client_name:Rtap100711777509805 on WhiteList
2026-04-30 08:43:25 [Info] start rtap process success, pid is 2840, argument is Rtap100711777509805
2026-04-30 08:43:25 [Info] New ClientConnectNotify : Rtap100711777509805, id is 000004B4
2026-04-30 08:43:25 [Info] ipc client:Rtap100711777509805 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 08:43:26 [Info] Rtap Platform Rtap100711777509805 execv work --windows-process-check on pid 2840
2026-04-30 08:43:27 [Info] csrss.exe open proc 2840 AliSecCheck.ex
2026-04-30 08:43:28 [Info] csrss.exe open thread 2840 AliSecCheck.ex
2026-04-30 08:43:53 [Info] Done Work --windows-process-check:1
2026-04-30 08:43:53 [Info] Rtap Platform Rtap100711777509805 Exit:normal exit
2026-04-30 08:43:55 [Info] ClientDisConnectNotify : Rtap100711777509805, id is 000004B4
2026-04-30 08:59:43 [Warn] high cpu, cpu is 12
2026-04-30 09:06:29 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16084","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"12","aliyundun_max_mem":"16400","aliyundun_upload_time":"1777511189","aliyundun_write_pid_times":"0","ipc_send_count":"154","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 09:33:39 [Info] get meta data success by v2
2026-04-30 09:33:39 [Info] get empty metaserver config
2026-04-30 09:33:39 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 09:33:40 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 09:33:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 09:33:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 09:33:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 09:33:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 09:33:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 09:33:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 09:33:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 09:33:40 [Info] download cert compare md5 same
2026-04-30 09:33:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 09:33:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 09:33:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 09:33:54 [Info] TotalPhys:2047,AvailPhys:308,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6669,AvailPageFile:1393,SelfWorkingSet:16228, SelfPageFile:13540
2026-04-30 09:33:54 [Info] CommitTotal:5276,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:308,SystemCache:216,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27685,ProcessCount:52,ThreadCount:764
2026-04-30 10:06:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16297","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"7","aliyundun_max_mem":"16464","aliyundun_upload_time":"1777514801","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 10:25:30 [Info] GetMessage : T_MSG_CHECK
2026-04-30 10:25:30 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTU5MzAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTU5MTMwLCJzdWIiOiJSVEFQX0lEWF8xODA0MzhfMTc3NzUxNTkzMDYwOCJ9.S33n9Z8YefmBCv0JLjffIkpznzVRbRVBSXztYFcvU4Q has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 10:25:32 [Info] GetMessage : T_MSG_CHECK
2026-04-30 10:25:32 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTU5MzEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTU5MTMxLCJzdWIiOiJSVEFQX0lEWF8xODA0NDNfMTc3NzUxNTkzMTc4NiJ9.CMP_eGL495k9j6hR9qScmM2j4rIloGeJra13kT_rfJQ has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 10:25:35 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 10:25:35 [Info] ipc client:Rtap300891777515935_handler Reg client_name:Rtap300891777515935 on WhiteList
2026-04-30 10:25:35 [Info] start rtap process success, pid is 1072, argument is Rtap300891777515935
2026-04-30 10:25:35 [Info] New ClientConnectNotify : Rtap300891777515935, id is 00000504
2026-04-30 10:25:35 [Info] Rtap Platform Rtap300891777515935 execv work --windows-schedule-task-check on pid 1072
2026-04-30 10:25:35 [Info] ipc client:Rtap300891777515935 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 10:25:36 [Info] csrss.exe open proc 1072 AliSecCheck.ex
2026-04-30 10:25:37 [Info] csrss.exe open thread 1072 AliSecCheck.ex
2026-04-30 10:25:40 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 10:25:40 [Info] ipc client:Rtap301051777515940_handler Reg client_name:Rtap301051777515940 on WhiteList
2026-04-30 10:25:40 [Info] start rtap process success, pid is 3204, argument is Rtap301051777515940
2026-04-30 10:25:40 [Info] New ClientConnectNotify : Rtap301051777515940, id is 000004B4
2026-04-30 10:25:40 [Info] ipc client:Rtap301051777515940 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 10:25:40 [Info] Rtap Platform Rtap301051777515940 execv work --windows-registry-check on pid 3204
2026-04-30 10:25:42 [Info] csrss.exe open proc 3204 AliSecCheck.ex
2026-04-30 10:25:43 [Info] csrss.exe open thread 3204 AliSecCheck.ex
2026-04-30 10:26:12 [Info] Done Work --windows-schedule-task-check:1
2026-04-30 10:26:12 [Info] Rtap Platform Rtap300891777515935 Exit:normal exit
2026-04-30 10:26:14 [Info] ClientDisConnectNotify : Rtap300891777515935, id is 00000504
2026-04-30 10:26:18 [Info] Done Work --windows-registry-check:1
2026-04-30 10:26:18 [Info] Rtap Platform Rtap301051777515940 Exit:normal exit
2026-04-30 10:26:20 [Info] ClientDisConnectNotify : Rtap301051777515940, id is 000004B4
2026-04-30 10:26:22 [Info] GetMessage : T_MSG_CHECK
2026-04-30 10:26:22 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTU5ODIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTU5MTgyLCJzdWIiOiJSVEFQX0lEWF8xODA0NDlfMTc3NzUxNTk4MjQ4OCJ9.MmPo7UgvFurCuYtck6dFIdXOiflnKh9_XIS_iNgbA0g has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 10:26:25 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 10:26:25 [Info] ipc client:Rtap302521777515985_handler Reg client_name:Rtap302521777515985 on WhiteList
2026-04-30 10:26:25 [Info] start rtap process success, pid is 1624, argument is Rtap302521777515985
2026-04-30 10:26:26 [Info] New ClientConnectNotify : Rtap302521777515985, id is 0000052C
2026-04-30 10:26:26 [Info] ipc client:Rtap302521777515985 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 10:26:26 [Info] Rtap Platform Rtap302521777515985 execv work --windows-driver-version-check on pid 1624
2026-04-30 10:26:27 [Info] csrss.exe open proc 1624 AliSecCheck.ex
2026-04-30 10:26:28 [Info] csrss.exe open thread 1624 AliSecCheck.ex
2026-04-30 10:26:33 [Info] Done Work --windows-driver-version-check:1
2026-04-30 10:26:33 [Info] Rtap Platform Rtap302521777515985 Exit:normal exit
2026-04-30 10:26:35 [Info] ClientDisConnectNotify : Rtap302521777515985, id is 0000052C
2026-04-30 10:32:55 [Info] GetMessage : T_MSG_CHECK
2026-04-30 10:32:55 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTYzNzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTU5NTc1LCJzdWIiOiJSVEFQX0lEWF8xODA0MzZfMTc3NzUxNjM3NTE4NyJ9.en7kR9S-wAAXwf0au5rIqrpbM7e45OwP0quHhv4QPAs has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 10:32:59 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 10:32:59 [Info] ipc client:Rtap315391777516379_handler Reg client_name:Rtap315391777516379 on WhiteList
2026-04-30 10:32:59 [Info] start rtap process success, pid is 3328, argument is Rtap315391777516379
2026-04-30 10:32:59 [Info] New ClientConnectNotify : Rtap315391777516379, id is 00000540
2026-04-30 10:32:59 [Info] ipc client:Rtap315391777516379 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 10:32:59 [Info] Rtap Platform Rtap315391777516379 execv work --tcp-connect-check on pid 3328
2026-04-30 10:33:00 [Info] csrss.exe open proc 3328 AliSecCheck.ex
2026-04-30 10:33:01 [Info] csrss.exe open thread 3328 AliSecCheck.ex
2026-04-30 10:33:10 [Info] Done Work --tcp-connect-check:1
2026-04-30 10:33:10 [Info] Rtap Platform Rtap315391777516379 Exit:normal exit
2026-04-30 10:33:13 [Info] ClientDisConnectNotify : Rtap315391777516379, id is 00000540
2026-04-30 10:34:12 [Info] TotalPhys:2047,AvailPhys:355,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1425,SelfWorkingSet:16268, SelfPageFile:13576
2026-04-30 10:34:12 [Info] CommitTotal:5244,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:355,SystemCache:151,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27671,ProcessCount:52,ThreadCount:758
2026-04-30 11:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16286","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16392","aliyundun_upload_time":"1777518370","aliyundun_write_pid_times":"0","ipc_send_count":"152","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 11:09:00 [Info] GetMessage : T_MSG_CHECK
2026-04-30 11:09:00 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1MTg1NDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTYxNzQwLCJzdWIiOiJSVEFQX0lEWF9XWVBnZl8xNzc3MjkxOTA1MjA0X2RhZDBjZGEwNmY1MTA2MGVlNDY4MTQ5ZjM1OTZiY2JmIiwic3ViIjoiUlRBUF9JRFhfMTgwNDQwXzE3Nzc1MTg1NDA4NDUifQ.geCrjZfuMWtphwY9_ailXud_EEaeWRM7lyTy22xtxmU has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 11:09:05 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 11:09:05 [Info] ipc client:Rtap58441777518545_handler Reg client_name:Rtap58441777518545 on WhiteList
2026-04-30 11:09:05 [Info] start rtap process success, pid is 4868, argument is Rtap58441777518545
2026-04-30 11:09:05 [Info] New ClientConnectNotify : Rtap58441777518545, id is 0000052C
2026-04-30 11:09:05 [Info] ipc client:Rtap58441777518545 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 11:09:05 [Info] Rtap Platform Rtap58441777518545 execv work --windows-autorun-item-check on pid 4868
2026-04-30 11:09:06 [Info] csrss.exe open proc 4868 AliSecCheck.ex
2026-04-30 11:09:07 [Info] csrss.exe open thread 4868 AliSecCheck.ex
2026-04-30 11:09:20 [Info] Done Work --windows-autorun-item-check:1
2026-04-30 11:09:20 [Info] Rtap Platform Rtap58441777518545 Exit:normal exit
2026-04-30 11:09:23 [Info] ClientDisConnectNotify : Rtap58441777518545, id is 0000052C
2026-04-30 11:34:30 [Info] TotalPhys:2047,AvailPhys:341,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1409,SelfWorkingSet:16276, SelfPageFile:13692
2026-04-30 11:34:30 [Info] CommitTotal:5260,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:341,SystemCache:219,KernelTotal:267,KernelPaged:174,KernelNonpaged:92,PageSize:4096,HandleCount:27595,ProcessCount:52,ThreadCount:765
2026-04-30 12:06:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16250","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16312","aliyundun_upload_time":"1777521993","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 12:34:46 [Info] TotalPhys:2047,AvailPhys:326,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1394,SelfWorkingSet:16364, SelfPageFile:13696
2026-04-30 12:34:46 [Info] CommitTotal:5274,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:326,SystemCache:227,KernelTotal:267,KernelPaged:174,KernelNonpaged:92,PageSize:4096,HandleCount:27630,ProcessCount:52,ThreadCount:763
2026-04-30 12:49:54 [Info] get meta data success by v2
2026-04-30 12:49:54 [Info] get empty metaserver config
2026-04-30 12:49:54 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 12:49:54 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 12:49:54 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 12:49:54 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 12:49:54 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 12:49:54 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 12:49:54 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 12:49:54 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 12:49:54 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 12:49:54 [Info] download cert compare md5 same
2026-04-30 12:49:54 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 12:49:54 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 12:49:54 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 13:06:35 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16297","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16448","aliyundun_upload_time":"1777525595","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 13:35:02 [Info] TotalPhys:2047,AvailPhys:323,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1393,SelfWorkingSet:16212, SelfPageFile:13412
2026-04-30 13:35:02 [Info] CommitTotal:5275,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:323,SystemCache:231,KernelTotal:267,KernelPaged:174,KernelNonpaged:92,PageSize:4096,HandleCount:27598,ProcessCount:52,ThreadCount:761
2026-04-30 13:55:03 [Info] nCurrentClock is 144010400, nCurrentTime is 1777528503
2026-04-30 13:55:03 [Info] SendMessage T_MSG_LOGIN
2026-04-30 13:55:03 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-30 13:55:03 [Info] begin to enable self guard after reconnect
2026-04-30 13:55:03 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-30 13:55:04 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-30 13:55:04 [Info] GetMessage : T_MSG_CHECK
2026-04-30 13:55:04 [Info] task 85ec2c71-f8c4-4939-95b7-3dcd8a035715 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 13:55:06 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-30 13:55:06 [Info] key : cpu, value : 10
2026-04-30 13:55:06 [Info] key : rio, value : 20480
2026-04-30 13:55:06 [Info] key : wio, value : 20480
2026-04-30 13:55:06 [Info] key : cpu_all, value : 0
2026-04-30 13:55:06 [Info] key : max_pid_check, value : 200
2026-04-30 13:55:06 [Info] key : throw_dump, value : 0
2026-04-30 13:55:06 [Info] key : hash_mode, value : 1
2026-04-30 13:55:06 [Info] key : mem, value : 200
2026-04-30 13:55:06 [Info] can not find key max_fd in online conf
2026-04-30 13:55:06 [Info] key : proc_limit, value : 1
2026-04-30 13:55:06 [Info] key : resource_limit_mode, value : 3
2026-04-30 13:55:06 [Info] key : rtap_update_mode, value : 1
2026-04-30 13:55:06 [Info] can not find key debug in online conf
2026-04-30 13:55:06 [Info] can not find key update_mode in online conf
2026-04-30 13:55:06 [Info] can not find key http_mode in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_enable in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_new_agent in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-30 13:55:06 [Info] can not find key mem_low_mark in online conf
2026-04-30 13:55:06 [Info] can not find key obnormal_report_interval in online conf
2026-04-30 13:55:06 [Info] key : cache_mode, value : 0
2026-04-30 13:55:06 [Info] key : abnormal_monitor_mode, value : 3
2026-04-30 13:55:06 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-30 13:55:06 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-30 13:55:06 [Info] key : queue_size_ratio, value : 80
2026-04-30 13:55:06 [Info] queue_size_ratio is 80
2026-04-30 13:55:06 [Info] resource limit mode and max limit cpu is not change
2026-04-30 13:55:06 [Info] set hash mode 1
2026-04-30 13:55:06 [Info] RTAP timeout config:9600000
2026-04-30 13:55:06 [Info] self_guard_mode config is 0
2026-04-30 13:55:11 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 13:55:11 [Info] ipc client:Rtap56211777528511_handler Reg client_name:Rtap56211777528511 on WhiteList
2026-04-30 13:55:11 [Info] start rtap process success, pid is 2744, argument is Rtap56211777528511
2026-04-30 13:55:11 [Info] New ClientConnectNotify : Rtap56211777528511, id is 00000540
2026-04-30 13:55:11 [Info] ipc client:Rtap56211777528511 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 13:55:11 [Info] Rtap Platform Rtap56211777528511 execv work --windows-sysinfoext-check on pid 2744
2026-04-30 13:55:13 [Info] csrss.exe open proc 2744 AliSecCheck.ex
2026-04-30 13:55:14 [Info] csrss.exe open thread 2744 AliSecCheck.ex
2026-04-30 13:55:22 [Info] Done Work --windows-sysinfoext-check:1
2026-04-30 13:55:22 [Info] Rtap Platform Rtap56211777528511 Exit:normal exit
2026-04-30 13:55:24 [Info] ClientDisConnectNotify : Rtap56211777528511, id is 00000540
2026-04-30 14:06:19 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16239","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16432","aliyundun_upload_time":"1777529179","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 14:35:19 [Info] TotalPhys:2047,AvailPhys:370,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1412,SelfWorkingSet:16284, SelfPageFile:13700
2026-04-30 14:35:19 [Info] CommitTotal:5257,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:370,SystemCache:154,KernelTotal:264,KernelPaged:171,KernelNonpaged:93,PageSize:4096,HandleCount:27508,ProcessCount:52,ThreadCount:764
2026-04-30 15:06:14 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16214","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16304","aliyundun_upload_time":"1777532774","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 15:35:43 [Info] TotalPhys:2047,AvailPhys:367,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1409,SelfWorkingSet:16236, SelfPageFile:13636
2026-04-30 15:35:43 [Info] CommitTotal:5259,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:367,SystemCache:162,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27338,ProcessCount:51,ThreadCount:754
2026-04-30 16:06:08 [Info] get meta data success by v2
2026-04-30 16:06:08 [Info] get empty metaserver config
2026-04-30 16:06:08 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 16:06:08 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 16:06:08 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 16:06:09 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 16:06:09 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 16:06:09 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 16:06:09 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 16:06:09 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 16:06:09 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 16:06:09 [Info] download cert compare md5 same
2026-04-30 16:06:09 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 16:06:09 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 16:06:09 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 16:06:11 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16200","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16308","aliyundun_upload_time":"1777536371","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 16:36:08 [Info] TotalPhys:2047,AvailPhys:363,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1407,SelfWorkingSet:16212, SelfPageFile:13640
2026-04-30 16:36:08 [Info] CommitTotal:5261,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:363,SystemCache:167,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27347,ProcessCount:51,ThreadCount:753
2026-04-30 17:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16189","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16320","aliyundun_upload_time":"1777539973","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 17:36:33 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1407,SelfWorkingSet:16160, SelfPageFile:13596
2026-04-30 17:36:33 [Info] CommitTotal:5261,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:171,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27395,ProcessCount:51,ThreadCount:763
2026-04-30 18:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16124","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16208","aliyundun_upload_time":"1777543576","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 18:06:52 [Info] GetMessage : T_MSG_CHECK
2026-04-30 18:06:52 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc1NDM2MTIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTg2ODEyLCJzdWIiOiJSVEFQX0lEWF8xODA1MDVfMTc3NzU0MzYxMjA3MCJ9.cWox-ARIASbVCPwSdQu1xn0yPcmAK-oji5ZQMSL3pAc has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 18:06:56 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 18:06:56 [Info] ipc client:Rtap221801777543616_handler Reg client_name:Rtap221801777543616 on WhiteList
2026-04-30 18:06:56 [Info] start rtap process success, pid is 1624, argument is Rtap221801777543616
2026-04-30 18:06:56 [Info] New ClientConnectNotify : Rtap221801777543616, id is 000004B4
2026-04-30 18:06:56 [Info] ipc client:Rtap221801777543616 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 18:06:56 [Info] Rtap Platform Rtap221801777543616 execv work --secnet_rasp_agent on pid 1624
2026-04-30 18:06:58 [Info] csrss.exe open proc 1624 AliSecCheck.ex
2026-04-30 18:06:59 [Info] csrss.exe open thread 1624 AliSecCheck.ex
2026-04-30 18:07:00 [Info] csrss.exe open thread 1624 AliSecCheck.ex
2026-04-30 18:07:03 [Info] Done Work --secnet_rasp_agent:1
2026-04-30 18:07:03 [Info] Rtap Platform Rtap221801777543616 Exit:normal exit
2026-04-30 18:07:05 [Info] ClientDisConnectNotify : Rtap221801777543616, id is 000004B4
2026-04-30 18:36:58 [Info] TotalPhys:2047,AvailPhys:357,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1399,SelfWorkingSet:16168, SelfPageFile:13568
2026-04-30 18:36:58 [Info] CommitTotal:5269,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:357,SystemCache:236,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27341,ProcessCount:51,ThreadCount:757
2026-04-30 19:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16124","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16300","aliyundun_upload_time":"1777547175","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 19:23:01 [Info] get meta data success by v2
2026-04-30 19:23:01 [Info] get empty metaserver config
2026-04-30 19:23:01 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 19:23:02 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 19:23:02 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 19:23:02 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 19:23:02 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 19:23:02 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 19:23:02 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 19:23:02 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 19:23:02 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 19:23:02 [Info] download cert compare md5 same
2026-04-30 19:23:02 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 19:23:02 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 19:23:02 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 19:23:02 [Info] nCurrentClock is 162011500, nCurrentTime is 1777548182
2026-04-30 19:23:02 [Info] SendMessage T_MSG_LOGIN
2026-04-30 19:23:02 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-30 19:23:02 [Info] begin to enable self guard after reconnect
2026-04-30 19:23:02 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-30 19:23:02 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-30 19:23:03 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-04-30 19:23:03 [Info] GetMessage : T_MSG_CHECK
2026-04-30 19:23:03 [Info] task 49607dc9-86c6-44e6-a5c2-e0d010632b9f has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-30 19:23:05 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-30 19:23:05 [Info] key : cpu, value : 10
2026-04-30 19:23:05 [Info] key : rio, value : 20480
2026-04-30 19:23:05 [Info] key : wio, value : 20480
2026-04-30 19:23:05 [Info] key : cpu_all, value : 0
2026-04-30 19:23:05 [Info] key : max_pid_check, value : 200
2026-04-30 19:23:05 [Info] key : throw_dump, value : 0
2026-04-30 19:23:05 [Info] key : hash_mode, value : 1
2026-04-30 19:23:05 [Info] key : mem, value : 200
2026-04-30 19:23:05 [Info] can not find key max_fd in online conf
2026-04-30 19:23:05 [Info] key : proc_limit, value : 1
2026-04-30 19:23:05 [Info] key : resource_limit_mode, value : 3
2026-04-30 19:23:05 [Info] key : rtap_update_mode, value : 1
2026-04-30 19:23:05 [Info] can not find key debug in online conf
2026-04-30 19:23:05 [Info] can not find key update_mode in online conf
2026-04-30 19:23:05 [Info] can not find key http_mode in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_enable in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_new_agent in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-30 19:23:05 [Info] can not find key mem_low_mark in online conf
2026-04-30 19:23:05 [Info] can not find key obnormal_report_interval in online conf
2026-04-30 19:23:05 [Info] key : cache_mode, value : 0
2026-04-30 19:23:05 [Info] key : abnormal_monitor_mode, value : 3
2026-04-30 19:23:05 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-30 19:23:05 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-30 19:23:05 [Info] key : queue_size_ratio, value : 80
2026-04-30 19:23:05 [Info] queue_size_ratio is 80
2026-04-30 19:23:05 [Info] resource limit mode and max limit cpu is not change
2026-04-30 19:23:05 [Info] set hash mode 1
2026-04-30 19:23:05 [Info] RTAP timeout config:9600000
2026-04-30 19:23:05 [Info] self_guard_mode config is 0
2026-04-30 19:23:08 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-30 19:23:08 [Info] ipc client:Rtap43421777548188_handler Reg client_name:Rtap43421777548188 on WhiteList
2026-04-30 19:23:08 [Info] start rtap process success, pid is 2084, argument is Rtap43421777548188
2026-04-30 19:23:09 [Info] New ClientConnectNotify : Rtap43421777548188, id is 00000540
2026-04-30 19:23:09 [Info] Rtap Platform Rtap43421777548188 execv work --windows-sysinfoext-check on pid 2084
2026-04-30 19:23:09 [Info] ipc client:Rtap43421777548188 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-30 19:23:10 [Info] csrss.exe open proc 2084 AliSecCheck.ex
2026-04-30 19:23:11 [Info] csrss.exe open thread 2084 AliSecCheck.ex
2026-04-30 19:23:16 [Info] Done Work --windows-sysinfoext-check:1
2026-04-30 19:23:16 [Info] Rtap Platform Rtap43421777548188 Exit:normal exit
2026-04-30 19:23:18 [Info] ClientDisConnectNotify : Rtap43421777548188, id is 00000540
2026-04-30 19:37:25 [Info] TotalPhys:2047,AvailPhys:360,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1401,SelfWorkingSet:16432, SelfPageFile:13804
2026-04-30 19:37:25 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:360,SystemCache:240,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27510,ProcessCount:52,ThreadCount:762
2026-04-30 20:06:22 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16270","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16456","aliyundun_upload_time":"1777550782","aliyundun_write_pid_times":"0","ipc_send_count":"146","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 20:37:51 [Info] TotalPhys:2047,AvailPhys:362,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1401,SelfWorkingSet:16136, SelfPageFile:13272
2026-04-30 20:37:51 [Info] CommitTotal:5267,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:362,SystemCache:240,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27322,ProcessCount:51,ThreadCount:751
2026-04-30 21:06:23 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16251","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16380","aliyundun_upload_time":"1777554383","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 21:38:16 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1405,SelfWorkingSet:16300, SelfPageFile:13492
2026-04-30 21:38:16 [Info] CommitTotal:5263,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:239,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27394,ProcessCount:51,ThreadCount:762
2026-04-30 22:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16232","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16308","aliyundun_upload_time":"1777557978","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-30 22:38:40 [Info] TotalPhys:2047,AvailPhys:365,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1406,SelfWorkingSet:16280, SelfPageFile:13484
2026-04-30 22:38:40 [Info] CommitTotal:5262,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:365,SystemCache:240,KernelTotal:268,KernelPaged:175,KernelNonpaged:93,PageSize:4096,HandleCount:27376,ProcessCount:51,ThreadCount:757
2026-04-30 22:39:51 [Info] get meta data success by v2
2026-04-30 22:39:51 [Info] get empty metaserver config
2026-04-30 22:39:51 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 22:39:51 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-30 22:39:51 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-30 22:39:51 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-30 22:39:51 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-30 22:39:51 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-30 22:39:51 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 22:39:51 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-30 22:39:51 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-30 22:39:51 [Info] download cert compare md5 same
2026-04-30 22:39:51 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 22:39:51 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-30 22:39:51 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 23:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16282","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16440","aliyundun_upload_time":"1777561576","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-04-30 23:39:11 [Info] TotalPhys:2047,AvailPhys:381,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1405,SelfWorkingSet:16236, SelfPageFile:13472
2026-04-30 23:39:11 [Info] CommitTotal:5263,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:381,SystemCache:170,KernelTotal:265,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27595,ProcessCount:52,ThreadCount:774
2026-05-01 00:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16212","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16284","aliyundun_upload_time":"1777565173","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 00:36:19 [Info] TotalPhys:2047,AvailPhys:396,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1344,SelfWorkingSet:12184, SelfPageFile:13572
2026-05-07 00:36:19 [Info] CommitTotal:5088,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:396,SystemCache:336,KernelTotal:261,KernelPaged:172,KernelNonpaged:88,PageSize:4096,HandleCount:28395,ProcessCount:52,ThreadCount:760
2026-05-07 01:06:20 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"4","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12212","aliyundun_cpu_high_count":"3","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"12268","aliyundun_upload_time":"1778087180","aliyundun_write_pid_times":"0","ipc_send_count":"130","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 01:37:14 [Info] TotalPhys:2047,AvailPhys:397,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1353,SelfWorkingSet:12204, SelfPageFile:13624
2026-05-07 01:37:14 [Info] CommitTotal:5079,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:397,SystemCache:351,KernelTotal:260,KernelPaged:171,KernelNonpaged:88,PageSize:4096,HandleCount:28333,ProcessCount:52,ThreadCount:763
2026-05-07 01:51:40 [Warn] high cpu, cpu is 35
2026-05-07 02:02:15 [Info] GetMessage : T_MSG_CHECK
2026-05-07 02:02:15 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwOTA1MzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTMzNzM1LCJzdWIiOiJSVEFQX0lEWF8xODA5NzBfMTc3ODA5MDUzNTc4NiJ9.aL3u_B93beTARw4BQtz6MfLf6b8Jb_iI-sNOvPW_SAM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 02:02:22 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 02:02:22 [Info] ipc client:Rtap59701778090542_handler Reg client_name:Rtap59701778090542 on WhiteList
2026-05-07 02:02:22 [Info] start rtap process success, pid is 3292, argument is Rtap59701778090542
2026-05-07 02:02:23 [Info] system memory usage is 80
2026-05-07 02:02:23 [Info] system memory usage is 80
2026-05-07 02:02:24 [Info] system memory usage is 80
2026-05-07 02:02:24 [Info] csrss.exe open proc 3292 AliSecCheck.ex
2026-05-07 02:02:24 [Info] system memory usage is 80
2026-05-07 02:02:24 [Info] New ClientConnectNotify : Rtap59701778090542, id is 00000524
2026-05-07 02:02:25 [Info] Rtap Platform Rtap59701778090542 execv work --sca on pid 3292
2026-05-07 02:02:25 [Info] ipc client:Rtap59701778090542 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 02:02:25 [Info] csrss.exe open thread 3292 AliSecCheck.ex
2026-05-07 02:02:26 [Info] csrss.exe open thread 3292 AliSecCheck.ex
2026-05-07 02:02:27 [Info] csrss.exe open thread 3292 AliSecCheck.ex
2026-05-07 02:02:28 [Info] csrss.exe open thread 3292 AliSecCheck.ex
2026-05-07 02:02:52 [Info] csrss.exe open thread 3292 AliSecCheck.ex
2026-05-07 02:03:12 [Info] Done Work --sca:1
2026-05-07 02:03:12 [Info] Rtap Platform Rtap59701778090542 Exit:normal exit
2026-05-07 02:03:14 [Info] ClientDisConnectNotify : Rtap59701778090542, id is 00000524
2026-05-07 02:05:02 [Warn] high cpu, cpu is 17
2026-05-07 02:06:14 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"7","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12190","aliyundun_cpu_high_count":"5","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"2","aliyundun_max_cpu":"35","aliyundun_max_mem":"12288","aliyundun_upload_time":"1778090774","aliyundun_write_pid_times":"0","ipc_send_count":"125","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 02:38:29 [Info] TotalPhys:2047,AvailPhys:397,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1348,SelfWorkingSet:12216, SelfPageFile:13692
2026-05-07 02:38:29 [Info] CommitTotal:5084,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:397,SystemCache:328,KernelTotal:261,KernelPaged:173,KernelNonpaged:88,PageSize:4096,HandleCount:28334,ProcessCount:52,ThreadCount:761
2026-05-07 03:06:21 [Info] get meta data success by v2
2026-05-07 03:06:21 [Info] get empty metaserver config
2026-05-07 03:06:21 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 03:06:21 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 03:06:21 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-07 03:06:21 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-07 03:06:21 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-07 03:06:21 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-07 03:06:21 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 03:06:21 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 03:06:22 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-07 03:06:22 [Info] download cert compare md5 same
2026-05-07 03:06:22 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 03:06:22 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 03:06:22 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-07 03:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12159","aliyundun_cpu_high_count":"2","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"10","aliyundun_max_mem":"12220","aliyundun_upload_time":"1778094400","aliyundun_write_pid_times":"0","ipc_send_count":"117","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 03:39:16 [Info] TotalPhys:2047,AvailPhys:428,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1372,SelfWorkingSet:12100, SelfPageFile:13616
2026-05-07 03:39:16 [Info] CommitTotal:5060,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:428,SystemCache:351,KernelTotal:262,KernelPaged:174,KernelNonpaged:88,PageSize:4096,HandleCount:28491,ProcessCount:53,ThreadCount:776
2026-05-07 04:06:29 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"12173","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"12280","aliyundun_upload_time":"1778097989","aliyundun_write_pid_times":"0","ipc_send_count":"123","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 04:39:55 [Info] TotalPhys:2047,AvailPhys:409,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1324,SelfWorkingSet:12304, SelfPageFile:13776
2026-05-07 04:39:55 [Info] CommitTotal:5108,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:409,SystemCache:381,KernelTotal:262,KernelPaged:173,KernelNonpaged:89,PageSize:4096,HandleCount:28699,ProcessCount:55,ThreadCount:790
2026-05-07 05:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12255","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"12396","aliyundun_upload_time":"1778101578","aliyundun_write_pid_times":"0","ipc_send_count":"110","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 05:18:44 [Warn] high cpu, cpu is 38
2026-05-07 05:25:12 [Warn] high cpu, cpu is 14
2026-05-07 05:40:55 [Info] TotalPhys:2047,AvailPhys:400,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1327,SelfWorkingSet:12376, SelfPageFile:13772
2026-05-07 05:40:55 [Info] CommitTotal:5105,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:400,SystemCache:365,KernelTotal:267,KernelPaged:177,KernelNonpaged:90,PageSize:4096,HandleCount:28551,ProcessCount:53,ThreadCount:783
2026-05-07 05:42:59 [Warn] high cpu, cpu is 11
2026-05-07 05:52:56 [Info] nCurrentClock is 666041000, nCurrentTime is 1778104376
2026-05-07 05:52:56 [Info] SendMessage T_MSG_LOGIN
2026-05-07 05:52:56 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-07 05:52:56 [Info] begin to enable self guard after reconnect
2026-05-07 05:52:56 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-07 05:52:56 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-07 05:52:57 [Info] GetMessage : T_MSG_CHECK
2026-05-07 05:52:57 [Info] task ac809b4f-e71d-4640-ac19-643647619e8d has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 05:52:59 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-07 05:52:59 [Info] key : cpu, value : 10
2026-05-07 05:52:59 [Info] key : rio, value : 20480
2026-05-07 05:52:59 [Info] key : wio, value : 20480
2026-05-07 05:52:59 [Info] key : cpu_all, value : 0
2026-05-07 05:52:59 [Info] key : max_pid_check, value : 200
2026-05-07 05:52:59 [Info] key : throw_dump, value : 0
2026-05-07 05:52:59 [Info] key : hash_mode, value : 1
2026-05-07 05:52:59 [Info] key : mem, value : 200
2026-05-07 05:52:59 [Info] can not find key max_fd in online conf
2026-05-07 05:52:59 [Info] key : proc_limit, value : 1
2026-05-07 05:52:59 [Info] key : resource_limit_mode, value : 3
2026-05-07 05:52:59 [Info] key : rtap_update_mode, value : 1
2026-05-07 05:52:59 [Info] can not find key debug in online conf
2026-05-07 05:52:59 [Info] can not find key update_mode in online conf
2026-05-07 05:52:59 [Info] can not find key http_mode in online conf
2026-05-07 05:52:59 [Info] can not find key rtap_enable in online conf
2026-05-07 05:52:59 [Info] can not find key rtap_new_agent in online conf
2026-05-07 05:52:59 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-07 05:52:59 [Info] can not find key mem_low_mark in online conf
2026-05-07 05:52:59 [Info] can not find key obnormal_report_interval in online conf
2026-05-07 05:52:59 [Info] key : cache_mode, value : 0
2026-05-07 05:52:59 [Info] key : abnormal_monitor_mode, value : 3
2026-05-07 05:52:59 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-07 05:52:59 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-07 05:52:59 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-07 05:52:59 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-07 05:52:59 [Info] key : queue_size_ratio, value : 80
2026-05-07 05:52:59 [Info] queue_size_ratio is 80
2026-05-07 05:52:59 [Info] resource limit mode and max limit cpu is not change
2026-05-07 05:52:59 [Info] set hash mode 1
2026-05-07 05:52:59 [Info] RTAP timeout config:9600000
2026-05-07 05:52:59 [Info] self_guard_mode config is 0
2026-05-07 05:53:03 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 05:53:03 [Info] ipc client:Rtap184011778104383_handler Reg client_name:Rtap184011778104383 on WhiteList
2026-05-07 05:53:03 [Info] start rtap process success, pid is 2856, argument is Rtap184011778104383
2026-05-07 05:53:05 [Info] csrss.exe open proc 2856 AliSecCheck.ex
2026-05-07 05:53:06 [Info] csrss.exe open thread 2856 AliSecCheck.ex
2026-05-07 05:53:06 [Info] system memory usage is 80
2026-05-07 05:53:07 [Info] system memory usage is 80
2026-05-07 05:53:07 [Info] csrss.exe open thread 2856 AliSecCheck.ex
2026-05-07 05:53:07 [Info] system memory usage is 80
2026-05-07 05:53:08 [Info] system memory usage is 80
2026-05-07 05:53:08 [Info] csrss.exe open thread 2856 AliSecCheck.ex
2026-05-07 05:53:08 [Info] New ClientConnectNotify : Rtap184011778104383, id is 00000540
2026-05-07 05:53:08 [Info] Rtap Platform Rtap184011778104383 execv work --windows-sysinfoext-check on pid 2856
2026-05-07 05:53:08 [Info] ipc client:Rtap184011778104383 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 05:53:09 [Info] csrss.exe open thread 2856 AliSecCheck.ex
2026-05-07 05:53:19 [Info] Done Work --windows-sysinfoext-check:1
2026-05-07 05:53:19 [Info] Rtap Platform Rtap184011778104383 Exit:normal exit
2026-05-07 05:53:21 [Info] ClientDisConnectNotify : Rtap184011778104383, id is 00000540
2026-05-07 06:06:30 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"7","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12285","aliyundun_cpu_high_count":"4","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"3","aliyundun_max_cpu":"38","aliyundun_max_mem":"12396","aliyundun_upload_time":"1778105190","aliyundun_write_pid_times":"0","ipc_send_count":"103","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 06:09:34 [Warn] high cpu, cpu is 31
2026-05-07 06:30:55 [Warn] high cpu, cpu is 35
2026-05-07 06:39:30 [Warn] high cpu, cpu is 25
2026-05-07 06:42:04 [Info] TotalPhys:2047,AvailPhys:383,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1328,SelfWorkingSet:12236, SelfPageFile:13644
2026-05-07 06:42:04 [Info] CommitTotal:5104,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:383,SystemCache:363,KernelTotal:273,KernelPaged:184,KernelNonpaged:89,PageSize:4096,HandleCount:28377,ProcessCount:52,ThreadCount:775
2026-05-07 06:57:34 [Warn] high cpu, cpu is 15
2026-05-07 07:00:12 [Warn] high cpu, cpu is 57
2026-05-07 07:01:30 [Warn] high cpu, cpu is 17
2026-05-07 07:04:30 [Warn] high cpu, cpu is 14
2026-05-07 07:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"13","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12226","aliyundun_cpu_high_count":"7","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"7","aliyundun_max_cpu":"57","aliyundun_max_mem":"12288","aliyundun_upload_time":"1778108797","aliyundun_write_pid_times":"0","ipc_send_count":"112","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 07:07:08 [Warn] high cpu, cpu is 24
2026-05-07 07:11:02 [Info] get meta data success by v2
2026-05-07 07:11:02 [Info] get empty metaserver config
2026-05-07 07:11:02 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 07:11:02 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 07:11:02 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-07 07:11:02 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-07 07:11:02 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-07 07:11:02 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-07 07:11:02 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 07:11:02 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 07:11:02 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-07 07:11:02 [Info] download cert compare md5 same
2026-05-07 07:11:02 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 07:11:02 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 07:11:02 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-07 07:43:03 [Info] TotalPhys:2047,AvailPhys:456,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1341,SelfWorkingSet:12168, SelfPageFile:13644
2026-05-07 07:43:03 [Info] CommitTotal:5091,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:456,SystemCache:429,KernelTotal:264,KernelPaged:175,KernelNonpaged:88,PageSize:4096,HandleCount:28379,ProcessCount:52,ThreadCount:772
2026-05-07 07:43:45 [Info] GetMessage : T_MSG_CHECK
2026-05-07 07:43:45 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgxMTEwMjUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTU0MjI1LCJzdWIiOiJSVEFQX0lEWF8xODA5NzJfMTc3ODExMTAyNTQ5OCJ9.5lUhozaXX7Mi87lu255HPDK7sz8-sdId_Fhnz7njBxI has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 07:43:50 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 07:43:50 [Info] ipc client:Rtap73391778111030_handler Reg client_name:Rtap73391778111030 on WhiteList
2026-05-07 07:43:51 [Info] start rtap process success, pid is 4328, argument is Rtap73391778111030
2026-05-07 07:43:52 [Info] system memory usage is 80
2026-05-07 07:43:53 [Info] system memory usage is 80
2026-05-07 07:43:53 [Info] csrss.exe open proc 4328 AliSecCheck.ex
2026-05-07 07:43:54 [Info] system memory usage is 80
2026-05-07 07:43:54 [Info] system memory usage is 80
2026-05-07 07:43:54 [Info] csrss.exe open thread 4328 AliSecCheck.ex
2026-05-07 07:43:55 [Info] system memory usage is 80
2026-05-07 07:43:55 [Info] system memory usage is 80
2026-05-07 07:43:55 [Info] csrss.exe open thread 4328 AliSecCheck.ex
2026-05-07 07:43:56 [Info] system memory usage is 80
2026-05-07 07:43:56 [Info] New ClientConnectNotify : Rtap73391778111030, id is 00000524
2026-05-07 07:43:56 [Info] Rtap Platform Rtap73391778111030 execv work --windows-vul-clean on pid 4328
2026-05-07 07:43:56 [Info] csrss.exe open thread 4328 AliSecCheck.ex
2026-05-07 07:43:57 [Info] ipc client:Rtap73391778111030 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 07:44:11 [Info] Done Work --windows-vul-clean:1
2026-05-07 07:44:11 [Info] Rtap Platform Rtap73391778111030 Exit:normal exit
2026-05-07 07:44:14 [Info] ClientDisConnectNotify : Rtap73391778111030, id is 00000524
2026-05-07 08:06:19 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12189","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"24","aliyundun_max_mem":"12288","aliyundun_upload_time":"1778112379","aliyundun_write_pid_times":"0","ipc_send_count":"132","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 08:42:26 [Info] GetMessage : T_MSG_CHECK
2026-05-07 08:42:26 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgxMTQ1NDYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTU3NzQ2LCJzdWIiOiJSVEFQX0lEWF8xODA5NjFfMTc3ODExNDU0NjM4OCJ9.Jmtx5eKs5azyLGBYBsCxrizYFecfLClgIHnesto2Tbw has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 08:42:33 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 08:42:33 [Info] ipc client:Rtap188441778114553_handler Reg client_name:Rtap188441778114553 on WhiteList
2026-05-07 08:42:33 [Info] start rtap process success, pid is 4444, argument is Rtap188441778114553
2026-05-07 08:42:35 [Info] csrss.exe open proc 4444 AliSecCheck.ex
2026-05-07 08:42:36 [Info] csrss.exe open thread 4444 AliSecCheck.ex
2026-05-07 08:42:36 [Info] New ClientConnectNotify : Rtap188441778114553, id is 0000052C
2026-05-07 08:42:37 [Info] ipc client:Rtap188441778114553 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 08:42:37 [Info] csrss.exe open thread 4444 AliSecCheck.ex
2026-05-07 08:42:37 [Info] Rtap Platform Rtap188441778114553 execv work --windows-process-check on pid 4444
2026-05-07 08:42:38 [Info] csrss.exe open thread 4444 AliSecCheck.ex
2026-05-07 08:43:04 [Info] Done Work --windows-process-check:1
2026-05-07 08:43:04 [Info] Rtap Platform Rtap188441778114553 Exit:normal exit
2026-05-07 08:43:06 [Info] ClientDisConnectNotify : Rtap188441778114553, id is 0000052C
2026-05-07 08:43:20 [Info] TotalPhys:2047,AvailPhys:443,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1306,SelfWorkingSet:12368, SelfPageFile:13744
2026-05-07 08:43:20 [Info] CommitTotal:5126,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:443,SystemCache:373,KernelTotal:260,KernelPaged:171,KernelNonpaged:88,PageSize:4096,HandleCount:28385,ProcessCount:52,ThreadCount:770
2026-05-07 09:06:14 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12260","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12368","aliyundun_upload_time":"1778115974","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 09:43:35 [Info] TotalPhys:2047,AvailPhys:437,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1287,SelfWorkingSet:12192, SelfPageFile:13640
2026-05-07 09:43:35 [Info] CommitTotal:5145,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:437,SystemCache:376,KernelTotal:259,KernelPaged:171,KernelNonpaged:88,PageSize:4096,HandleCount:28351,ProcessCount:52,ThreadCount:766
2026-05-07 10:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12209","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12244","aliyundun_upload_time":"1778119578","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 10:24:39 [Info] GetMessage : T_MSG_CHECK
2026-05-07 10:24:39 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgxMjA2NzksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTYzODc5LCJzdWIiOiJSVEFQX0lEWF8xODA5NjlfMTc3ODEyMDY3OTQ0MyJ9.qoEebh51b9jGL_imGVBx4ptij27quNAAmkfFEME0MQk has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 10:24:41 [Info] GetMessage : T_MSG_CHECK
2026-05-07 10:24:41 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgxMjA2ODAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTYzODgwLCJzdWIiOiJSVEFQX0lEWF8xODA5NjRfMTc3ODEyMDY4MDM4MyJ9.7wprMrBCRJITdflNBzqd9ohlXvA3y41GcXEQo0Bxb8E has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 10:24:43 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 10:24:43 [Info] ipc client:Rtap60941778120683_handler Reg client_name:Rtap60941778120683 on WhiteList
2026-05-07 10:24:43 [Info] start rtap process success, pid is 2880, argument is Rtap60941778120683
2026-05-07 10:24:44 [Info] csrss.exe open proc 2880 AliSecCheck.ex
2026-05-07 10:24:44 [Info] New ClientConnectNotify : Rtap60941778120683, id is 000004DC
2026-05-07 10:24:44 [Info] ipc client:Rtap60941778120683 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 10:24:44 [Info] Rtap Platform Rtap60941778120683 execv work --windows-registry-check on pid 2880
2026-05-07 10:24:45 [Info] csrss.exe open thread 2880 AliSecCheck.ex
2026-05-07 10:24:46 [Info] csrss.exe open thread 2880 AliSecCheck.ex
2026-05-07 10:24:47 [Info] csrss.exe open thread 2880 AliSecCheck.ex
2026-05-07 10:24:48 [Info] csrss.exe open thread 2880 AliSecCheck.ex
2026-05-07 10:24:49 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 10:24:49 [Info] ipc client:Rtap61131778120689_handler Reg client_name:Rtap61131778120689 on WhiteList
2026-05-07 10:24:49 [Info] start rtap process success, pid is 1012, argument is Rtap61131778120689
2026-05-07 10:24:50 [Info] New ClientConnectNotify : Rtap61131778120689, id is 00000524
2026-05-07 10:24:50 [Info] csrss.exe open proc 1012 AliSecCheck.ex
2026-05-07 10:24:50 [Info] Rtap Platform Rtap61131778120689 execv work --windows-schedule-task-check on pid 1012
2026-05-07 10:24:50 [Info] ipc client:Rtap61131778120689 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 10:24:51 [Info] csrss.exe open thread 1012 AliSecCheck.ex
2026-05-07 10:25:13 [Info] GetMessage : T_MSG_CHECK
2026-05-07 10:25:13 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgxMjA3MTMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTYzOTEzLCJzdWIiOiJSVEFQX0lEWF8xODA5NzVfMTc3ODEyMDcxMzI1NCJ9.F_sQcM6ZrtLNi03nErUJn1aQPiyvTQtXzfwntSeeGHo has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 10:25:19 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 10:25:19 [Info] ipc client:Rtap62111778120719_handler Reg client_name:Rtap62111778120719 on WhiteList
2026-05-07 10:25:19 [Info] start rtap process success, pid is 4636, argument is Rtap62111778120719
2026-05-07 10:25:19 [Info] New ClientConnectNotify : Rtap62111778120719, id is 000004D8
2026-05-07 10:25:19 [Info] ipc client:Rtap62111778120719 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 10:25:19 [Info] Rtap Platform Rtap62111778120719 execv work --windows-driver-version-check on pid 4636
2026-05-07 10:25:20 [Info] csrss.exe open proc 4636 AliSecCheck.ex
2026-05-07 10:25:21 [Info] csrss.exe open thread 4636 AliSecCheck.ex
2026-05-07 10:25:22 [Info] Done Work --windows-registry-check:1
2026-05-07 10:25:22 [Info] Rtap Platform Rtap60941778120683 Exit:normal exit
2026-05-07 10:25:25 [Info] ClientDisConnectNotify : Rtap60941778120683, id is 000004DC
2026-05-07 10:25:29 [Info] Done Work --windows-schedule-task-check:1
2026-05-07 10:25:29 [Info] Rtap Platform Rtap61131778120689 Exit:normal exit
2026-05-07 10:25:31 [Info] Done Work --windows-driver-version-check:1
2026-05-07 10:25:31 [Info] Rtap Platform Rtap62111778120719 Exit:normal exit
2026-05-07 10:25:31 [Info] ClientDisConnectNotify : Rtap61131778120689, id is 00000524
2026-05-07 10:25:33 [Info] ClientDisConnectNotify : Rtap62111778120719, id is 000004D8
2026-05-07 10:29:51 [Info] GetMessage : T_MSG_CHECK
2026-05-07 10:29:51 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgxMjA5OTEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTY0MTkxLCJzdWIiOiJSVEFQX0lEWF8xODA5NjJfMTc3ODEyMDk5MTYxNiJ9.b2aGZpv9ad0LWRgxZWodTnXRd5vhZCipGt4cbxCwHyM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 10:29:56 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 10:29:56 [Info] ipc client:Rtap71161778120996_handler Reg client_name:Rtap71161778120996 on WhiteList
2026-05-07 10:29:56 [Info] start rtap process success, pid is 3292, argument is Rtap71161778120996
2026-05-07 10:29:56 [Info] New ClientConnectNotify : Rtap71161778120996, id is 00000504
2026-05-07 10:29:56 [Info] ipc client:Rtap71161778120996 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 10:29:56 [Info] Rtap Platform Rtap71161778120996 execv work --tcp-connect-check on pid 3292
2026-05-07 10:29:57 [Info] get meta data success by v2
2026-05-07 10:29:57 [Info] get empty metaserver config
2026-05-07 10:29:57 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 10:29:57 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 10:29:57 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-07 10:29:57 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-07 10:29:57 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-07 10:29:57 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-07 10:29:57 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 10:29:57 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 10:29:57 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-07 10:29:57 [Info] download cert compare md5 same
2026-05-07 10:29:57 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 10:29:57 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 10:29:57 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-07 10:29:58 [Info] csrss.exe open proc 3292 AliSecCheck.ex
2026-05-07 10:29:59 [Info] csrss.exe open thread 3292 AliSecCheck.ex
2026-05-07 10:30:07 [Info] Done Work --tcp-connect-check:1
2026-05-07 10:30:07 [Info] Rtap Platform Rtap71161778120996 Exit:normal exit
2026-05-07 10:30:10 [Info] ClientDisConnectNotify : Rtap71161778120996, id is 00000504
2026-05-07 10:43:53 [Info] TotalPhys:2047,AvailPhys:513,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6433,AvailPageFile:1353,SelfWorkingSet:12376, SelfPageFile:14084
2026-05-07 10:43:53 [Info] CommitTotal:5079,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:513,SystemCache:431,KernelTotal:259,KernelPaged:171,KernelNonpaged:88,PageSize:4096,HandleCount:28373,ProcessCount:52,ThreadCount:766
2026-05-07 11:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"12275","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"7","aliyundun_max_mem":"12404","aliyundun_upload_time":"1778123186","aliyundun_write_pid_times":"0","ipc_send_count":"154","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 11:08:37 [Info] GetMessage : T_MSG_CHECK
2026-05-07 11:08:37 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgxMjMzMTcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTY2NTE3LCJzdWIiOiJSVEFQX0lEWF8xODA5NjZfMTc3ODEyMzMxNzMyMiJ9.LkeLgfbbWcUSHjAkGcRxjY47XfB5gIvAkV42JoEK5oU has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 11:08:43 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 11:08:43 [Info] ipc client:Rtap147151778123323_handler Reg client_name:Rtap147151778123323 on WhiteList
2026-05-07 11:08:43 [Info] start rtap process success, pid is 4936, argument is Rtap147151778123323
2026-05-07 11:08:43 [Info] New ClientConnectNotify : Rtap147151778123323, id is 000004D8
2026-05-07 11:08:43 [Info] ipc client:Rtap147151778123323 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 11:08:44 [Info] Rtap Platform Rtap147151778123323 execv work --windows-autorun-item-check on pid 4936
2026-05-07 11:08:45 [Info] csrss.exe open proc 4936 AliSecCheck.ex
2026-05-07 11:08:46 [Info] csrss.exe open thread 4936 AliSecCheck.ex
2026-05-07 11:09:03 [Info] Done Work --windows-autorun-item-check:1
2026-05-07 11:09:03 [Info] Rtap Platform Rtap147151778123323 Exit:normal exit
2026-05-07 11:09:05 [Info] ClientDisConnectNotify : Rtap147151778123323, id is 000004D8
2026-05-07 11:35:45 [Info] nCurrentClock is 684042000, nCurrentTime is 1778124945
2026-05-07 11:35:45 [Info] SendMessage T_MSG_LOGIN
2026-05-07 11:35:45 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-07 11:35:45 [Info] begin to enable self guard after reconnect
2026-05-07 11:35:45 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-07 11:35:45 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-07 11:35:45 [Info] GetMessage : T_MSG_CHECK
2026-05-07 11:35:45 [Info] task f9bc2c35-f30a-4a4c-86f1-3ad2c0240ec7 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 11:35:48 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-07 11:35:48 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-07 11:35:48 [Info] key : cpu, value : 10
2026-05-07 11:35:48 [Info] key : rio, value : 20480
2026-05-07 11:35:48 [Info] key : wio, value : 20480
2026-05-07 11:35:48 [Info] key : cpu_all, value : 0
2026-05-07 11:35:48 [Info] key : max_pid_check, value : 200
2026-05-07 11:35:48 [Info] key : throw_dump, value : 0
2026-05-07 11:35:48 [Info] key : hash_mode, value : 1
2026-05-07 11:35:48 [Info] key : mem, value : 200
2026-05-07 11:35:48 [Info] can not find key max_fd in online conf
2026-05-07 11:35:48 [Info] key : proc_limit, value : 1
2026-05-07 11:35:48 [Info] key : resource_limit_mode, value : 3
2026-05-07 11:35:48 [Info] key : rtap_update_mode, value : 1
2026-05-07 11:35:48 [Info] can not find key debug in online conf
2026-05-07 11:35:48 [Info] can not find key update_mode in online conf
2026-05-07 11:35:48 [Info] can not find key http_mode in online conf
2026-05-07 11:35:48 [Info] can not find key rtap_enable in online conf
2026-05-07 11:35:48 [Info] can not find key rtap_new_agent in online conf
2026-05-07 11:35:48 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-07 11:35:48 [Info] can not find key mem_low_mark in online conf
2026-05-07 11:35:48 [Info] can not find key obnormal_report_interval in online conf
2026-05-07 11:35:48 [Info] key : cache_mode, value : 0
2026-05-07 11:35:48 [Info] key : abnormal_monitor_mode, value : 3
2026-05-07 11:35:48 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-07 11:35:48 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-07 11:35:48 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-07 11:35:48 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-07 11:35:48 [Info] key : queue_size_ratio, value : 80
2026-05-07 11:35:48 [Info] queue_size_ratio is 80
2026-05-07 11:35:48 [Info] resource limit mode and max limit cpu is not change
2026-05-07 11:35:48 [Info] set hash mode 1
2026-05-07 11:35:48 [Info] RTAP timeout config:9600000
2026-05-07 11:35:48 [Info] self_guard_mode config is 0
2026-05-07 11:35:54 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 11:35:54 [Info] ipc client:Rtap200411778124954_handler Reg client_name:Rtap200411778124954 on WhiteList
2026-05-07 11:35:54 [Info] start rtap process success, pid is 4008, argument is Rtap200411778124954
2026-05-07 11:35:54 [Info] New ClientConnectNotify : Rtap200411778124954, id is 000004B4
2026-05-07 11:35:54 [Info] ipc client:Rtap200411778124954 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 11:35:54 [Info] Rtap Platform Rtap200411778124954 execv work --windows-sysinfoext-check on pid 4008
2026-05-07 11:35:55 [Info] csrss.exe open proc 4008 AliSecCheck.ex
2026-05-07 11:35:56 [Info] csrss.exe open thread 4008 AliSecCheck.ex
2026-05-07 11:36:05 [Info] Done Work --windows-sysinfoext-check:1
2026-05-07 11:36:05 [Info] Rtap Platform Rtap200411778124954 Exit:normal exit
2026-05-07 11:36:07 [Info] ClientDisConnectNotify : Rtap200411778124954, id is 000004B4
2026-05-07 11:44:14 [Info] TotalPhys:2047,AvailPhys:481,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1323,SelfWorkingSet:12236, SelfPageFile:13700
2026-05-07 11:44:14 [Info] CommitTotal:5109,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:481,SystemCache:379,KernelTotal:261,KernelPaged:172,KernelNonpaged:88,PageSize:4096,HandleCount:28568,ProcessCount:53,ThreadCount:776
2026-05-07 12:06:31 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12252","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12336","aliyundun_upload_time":"1778126791","aliyundun_write_pid_times":"0","ipc_send_count":"151","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 12:44:33 [Info] TotalPhys:2047,AvailPhys:495,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1322,SelfWorkingSet:12204, SelfPageFile:13608
2026-05-07 12:44:33 [Info] CommitTotal:5110,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:495,SystemCache:276,KernelTotal:260,KernelPaged:172,KernelNonpaged:88,PageSize:4096,HandleCount:28353,ProcessCount:52,ThreadCount:768
2026-05-07 13:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12192","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12248","aliyundun_upload_time":"1778130399","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 13:44:51 [Info] TotalPhys:2047,AvailPhys:494,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1328,SelfWorkingSet:12260, SelfPageFile:13700
2026-05-07 13:44:51 [Info] CommitTotal:5104,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:494,SystemCache:339,KernelTotal:261,KernelPaged:172,KernelNonpaged:88,PageSize:4096,HandleCount:28357,ProcessCount:52,ThreadCount:773
2026-05-07 13:46:21 [Info] get meta data success by v2
2026-05-07 13:46:21 [Info] get empty metaserver config
2026-05-07 13:46:21 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 13:46:21 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 13:46:21 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-07 13:46:21 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-07 13:46:21 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-07 13:46:21 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-07 13:46:21 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 13:46:21 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 13:46:21 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-07 13:46:21 [Info] download cert compare md5 same
2026-05-07 13:46:21 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 13:46:21 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 13:46:21 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-07 14:06:23 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"12220","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12312","aliyundun_upload_time":"1778133983","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-05-07 14:45:19 [Info] TotalPhys:2047,AvailPhys:455,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1291,SelfWorkingSet:12228, SelfPageFile:13632
2026-05-07 14:45:19 [Info] CommitTotal:5141,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:455,SystemCache:322,KernelTotal:274,KernelPaged:184,KernelNonpaged:89,PageSize:4096,HandleCount:28460,ProcessCount:52,ThreadCount:769
2026-05-07 15:06:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12228","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"12268","aliyundun_upload_time":"1778137593","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 15:45:42 [Info] TotalPhys:2047,AvailPhys:406,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1261,SelfWorkingSet:12172, SelfPageFile:13616
2026-05-07 15:45:42 [Info] CommitTotal:5171,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:406,SystemCache:358,KernelTotal:274,KernelPaged:183,KernelNonpaged:90,PageSize:4096,HandleCount:28114,ProcessCount:51,ThreadCount:763
2026-05-07 16:06:23 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12188","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"12252","aliyundun_upload_time":"1778141183","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 16:46:05 [Info] TotalPhys:2047,AvailPhys:425,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1292,SelfWorkingSet:12272, SelfPageFile:13752
2026-05-07 16:46:05 [Info] CommitTotal:5140,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:425,SystemCache:372,KernelTotal:269,KernelPaged:180,KernelNonpaged:89,PageSize:4096,HandleCount:28083,ProcessCount:51,ThreadCount:763
2026-05-07 17:03:33 [Info] get meta data success by v2
2026-05-07 17:03:33 [Info] get empty metaserver config
2026-05-07 17:03:33 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 17:03:34 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 17:03:34 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-07 17:03:34 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-07 17:03:34 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-07 17:03:34 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-07 17:03:34 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 17:03:34 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 17:03:35 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-07 17:03:35 [Info] download cert compare md5 same
2026-05-07 17:03:35 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 17:03:35 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 17:03:35 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-07 17:03:35 [Info] nCurrentClock is 702044400, nCurrentTime is 1778144615
2026-05-07 17:03:35 [Info] SendMessage T_MSG_LOGIN
2026-05-07 17:03:35 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-07 17:03:35 [Info] begin to enable self guard after reconnect
2026-05-07 17:03:35 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-07 17:03:35 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-07 17:03:35 [Info] GetMessage : T_MSG_CHECK
2026-05-07 17:03:35 [Info] task a19b61d1-7c2e-4601-bbe0-b6e06f27f814 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 17:03:37 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-07 17:03:37 [Info] key : cpu, value : 10
2026-05-07 17:03:37 [Info] key : rio, value : 20480
2026-05-07 17:03:37 [Info] key : wio, value : 20480
2026-05-07 17:03:37 [Info] key : cpu_all, value : 0
2026-05-07 17:03:37 [Info] key : max_pid_check, value : 200
2026-05-07 17:03:37 [Info] key : throw_dump, value : 0
2026-05-07 17:03:37 [Info] key : hash_mode, value : 1
2026-05-07 17:03:37 [Info] key : mem, value : 200
2026-05-07 17:03:37 [Info] can not find key max_fd in online conf
2026-05-07 17:03:37 [Info] key : proc_limit, value : 1
2026-05-07 17:03:37 [Info] key : resource_limit_mode, value : 3
2026-05-07 17:03:37 [Info] key : rtap_update_mode, value : 1
2026-05-07 17:03:37 [Info] can not find key debug in online conf
2026-05-07 17:03:37 [Info] can not find key update_mode in online conf
2026-05-07 17:03:37 [Info] can not find key http_mode in online conf
2026-05-07 17:03:37 [Info] can not find key rtap_enable in online conf
2026-05-07 17:03:37 [Info] can not find key rtap_new_agent in online conf
2026-05-07 17:03:37 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-07 17:03:37 [Info] can not find key mem_low_mark in online conf
2026-05-07 17:03:37 [Info] can not find key obnormal_report_interval in online conf
2026-05-07 17:03:37 [Info] key : cache_mode, value : 0
2026-05-07 17:03:37 [Info] key : abnormal_monitor_mode, value : 3
2026-05-07 17:03:37 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-07 17:03:37 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-07 17:03:37 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-07 17:03:37 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-07 17:03:37 [Info] key : queue_size_ratio, value : 80
2026-05-07 17:03:37 [Info] queue_size_ratio is 80
2026-05-07 17:03:37 [Info] resource limit mode and max limit cpu is not change
2026-05-07 17:03:37 [Info] set hash mode 1
2026-05-07 17:03:37 [Info] RTAP timeout config:9600000
2026-05-07 17:03:37 [Info] self_guard_mode config is 0
2026-05-07 17:03:42 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 17:03:42 [Info] ipc client:Rtap187321778144622_handler Reg client_name:Rtap187321778144622 on WhiteList
2026-05-07 17:03:42 [Info] start rtap process success, pid is 1424, argument is Rtap187321778144622
2026-05-07 17:03:44 [Info] csrss.exe open proc 1424 AliSecCheck.ex
2026-05-07 17:03:45 [Info] csrss.exe open thread 1424 AliSecCheck.ex
2026-05-07 17:03:46 [Info] csrss.exe open thread 1424 AliSecCheck.ex
2026-05-07 17:03:47 [Info] csrss.exe open thread 1424 AliSecCheck.ex
2026-05-07 17:03:48 [Info] csrss.exe open thread 1424 AliSecCheck.ex
2026-05-07 17:03:48 [Info] New ClientConnectNotify : Rtap187321778144622, id is 000004D8
2026-05-07 17:03:48 [Info] Rtap Platform Rtap187321778144622 execv work --windows-sysinfoext-check on pid 1424
2026-05-07 17:03:49 [Info] ipc client:Rtap187321778144622 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 17:04:43 [Info] Done Work --windows-sysinfoext-check:1
2026-05-07 17:04:43 [Info] Rtap Platform Rtap187321778144622 Exit:normal exit
2026-05-07 17:04:45 [Info] ClientDisConnectNotify : Rtap187321778144622, id is 000004D8
2026-05-07 17:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12215","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"12508","aliyundun_upload_time":"1778144775","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 17:46:31 [Info] TotalPhys:2047,AvailPhys:460,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1280,SelfWorkingSet:12384, SelfPageFile:14044
2026-05-07 17:46:31 [Info] CommitTotal:5152,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:460,SystemCache:398,KernelTotal:262,KernelPaged:173,KernelNonpaged:88,PageSize:4096,HandleCount:28363,ProcessCount:52,ThreadCount:778
2026-05-07 18:03:47 [Info] GetMessage : T_MSG_CHECK
2026-05-07 18:03:47 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgxNDgyMjcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MTkxNDI3LCJzdWIiOiJSVEFQX0lEWF8xODEwMzFfMTc3ODE0ODIyNzE4NiJ9.u06KcMihrZQBPenb0-xaEVTJGN3cLQ6vyRMXlyCYRxg has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 18:03:51 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 18:03:51 [Info] ipc client:Rtap305181778148231_handler Reg client_name:Rtap305181778148231 on WhiteList
2026-05-07 18:03:51 [Info] start rtap process success, pid is 4832, argument is Rtap305181778148231
2026-05-07 18:03:53 [Info] New ClientConnectNotify : Rtap305181778148231, id is 00000540
2026-05-07 18:03:53 [Info] Rtap Platform Rtap305181778148231 execv work --secnet_rasp_agent on pid 4832
2026-05-07 18:03:53 [Info] ipc client:Rtap305181778148231 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 18:03:54 [Info] csrss.exe open proc 4832 AliSecCheck.ex
2026-05-07 18:03:55 [Info] csrss.exe open thread 4832 AliSecCheck.ex
2026-05-07 18:03:56 [Info] csrss.exe open thread 4832 AliSecCheck.ex
2026-05-07 18:03:57 [Info] csrss.exe open thread 4832 AliSecCheck.ex
2026-05-07 18:03:58 [Info] csrss.exe open thread 4832 AliSecCheck.ex
2026-05-07 18:03:59 [Info] csrss.exe open thread 4832 AliSecCheck.ex
2026-05-07 18:04:00 [Info] Done Work --secnet_rasp_agent:1
2026-05-07 18:04:00 [Info] Rtap Platform Rtap305181778148231 Exit:normal exit
2026-05-07 18:04:02 [Info] ClientDisConnectNotify : Rtap305181778148231, id is 00000540
2026-05-07 18:06:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"12406","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"12576","aliyundun_upload_time":"1778148402","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 18:47:00 [Info] TotalPhys:2047,AvailPhys:437,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1269,SelfWorkingSet:12396, SelfPageFile:14092
2026-05-07 18:47:00 [Info] CommitTotal:5163,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:437,SystemCache:374,KernelTotal:264,KernelPaged:175,KernelNonpaged:89,PageSize:4096,HandleCount:28308,ProcessCount:52,ThreadCount:774
2026-05-07 19:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12351","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"9","aliyundun_max_mem":"12396","aliyundun_upload_time":"1778151999","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 19:48:00 [Info] TotalPhys:2047,AvailPhys:432,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1261,SelfWorkingSet:12160, SelfPageFile:13648
2026-05-07 19:48:00 [Info] CommitTotal:5171,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:432,SystemCache:342,KernelTotal:266,KernelPaged:177,KernelNonpaged:88,PageSize:4096,HandleCount:28248,ProcessCount:52,ThreadCount:769
2026-05-07 20:06:41 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12262","aliyundun_cpu_high_count":"2","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"8","aliyundun_max_mem":"12392","aliyundun_upload_time":"1778155601","aliyundun_write_pid_times":"0","ipc_send_count":"125","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 20:30:39 [Info] get meta data success by v2
2026-05-07 20:30:39 [Info] get empty metaserver config
2026-05-07 20:30:39 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 20:30:40 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-07 20:30:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-07 20:30:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-07 20:30:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-07 20:30:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-07 20:30:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 20:30:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-07 20:30:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-07 20:30:40 [Info] download cert compare md5 same
2026-05-07 20:30:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 20:30:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-07 20:30:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-07 20:48:58 [Info] TotalPhys:2047,AvailPhys:489,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6433,AvailPageFile:1317,SelfWorkingSet:12328, SelfPageFile:13884
2026-05-07 20:48:58 [Info] CommitTotal:5115,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:489,SystemCache:350,KernelTotal:268,KernelPaged:179,KernelNonpaged:89,PageSize:4096,HandleCount:28249,ProcessCount:52,ThreadCount:767
2026-05-07 21:06:20 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"12240","aliyundun_cpu_high_count":"2","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"10","aliyundun_max_mem":"12340","aliyundun_upload_time":"1778159180","aliyundun_write_pid_times":"0","ipc_send_count":"117","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 21:16:32 [Warn] high cpu, cpu is 31
2026-05-07 21:16:51 [Warn] high cpu, cpu is 35
2026-05-07 21:19:13 [Warn] high cpu, cpu is 34
2026-05-07 21:42:24 [Warn] high cpu, cpu is 18
2026-05-07 21:49:40 [Info] TotalPhys:2047,AvailPhys:433,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1266,SelfWorkingSet:12196, SelfPageFile:13676
2026-05-07 21:49:40 [Info] CommitTotal:5166,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:433,SystemCache:339,KernelTotal:268,KernelPaged:178,KernelNonpaged:89,PageSize:4096,HandleCount:28264,ProcessCount:52,ThreadCount:769
2026-05-07 22:06:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"7","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12241","aliyundun_cpu_high_count":"4","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"4","aliyundun_max_cpu":"35","aliyundun_max_mem":"12364","aliyundun_upload_time":"1778162802","aliyundun_write_pid_times":"0","ipc_send_count":"123","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 22:50:18 [Info] TotalPhys:2047,AvailPhys:416,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1263,SelfWorkingSet:12332, SelfPageFile:13764
2026-05-07 22:50:18 [Info] CommitTotal:5169,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:416,SystemCache:339,KernelTotal:269,KernelPaged:179,KernelNonpaged:89,PageSize:4096,HandleCount:28234,ProcessCount:52,ThreadCount:761
2026-05-07 22:55:23 [Info] nCurrentClock is 720045200, nCurrentTime is 1778165723
2026-05-07 22:55:23 [Info] SendMessage T_MSG_LOGIN
2026-05-07 22:55:23 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-07 22:55:23 [Info] begin to enable self guard after reconnect
2026-05-07 22:55:23 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-07 22:55:24 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-07 22:55:24 [Info] GetMessage : T_MSG_CHECK
2026-05-07 22:55:24 [Info] task a87bc5e8-cfa4-458e-853f-83aba35c7b24 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 22:55:26 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-07 22:55:26 [Info] key : cpu, value : 10
2026-05-07 22:55:26 [Info] key : rio, value : 20480
2026-05-07 22:55:26 [Info] key : wio, value : 20480
2026-05-07 22:55:26 [Info] key : cpu_all, value : 0
2026-05-07 22:55:26 [Info] key : max_pid_check, value : 200
2026-05-07 22:55:26 [Info] key : throw_dump, value : 0
2026-05-07 22:55:26 [Info] key : hash_mode, value : 1
2026-05-07 22:55:26 [Info] key : mem, value : 200
2026-05-07 22:55:26 [Info] can not find key max_fd in online conf
2026-05-07 22:55:26 [Info] key : proc_limit, value : 1
2026-05-07 22:55:26 [Info] key : resource_limit_mode, value : 3
2026-05-07 22:55:26 [Info] key : rtap_update_mode, value : 1
2026-05-07 22:55:26 [Info] can not find key debug in online conf
2026-05-07 22:55:26 [Info] can not find key update_mode in online conf
2026-05-07 22:55:26 [Info] can not find key http_mode in online conf
2026-05-07 22:55:26 [Info] can not find key rtap_enable in online conf
2026-05-07 22:55:26 [Info] can not find key rtap_new_agent in online conf
2026-05-07 22:55:26 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-07 22:55:26 [Info] can not find key mem_low_mark in online conf
2026-05-07 22:55:26 [Info] can not find key obnormal_report_interval in online conf
2026-05-07 22:55:26 [Info] key : cache_mode, value : 0
2026-05-07 22:55:26 [Info] key : abnormal_monitor_mode, value : 3
2026-05-07 22:55:26 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-07 22:55:26 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-07 22:55:26 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-07 22:55:26 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-07 22:55:26 [Info] key : queue_size_ratio, value : 80
2026-05-07 22:55:26 [Info] queue_size_ratio is 80
2026-05-07 22:55:26 [Info] resource limit mode and max limit cpu is not change
2026-05-07 22:55:26 [Info] set hash mode 1
2026-05-07 22:55:26 [Info] RTAP timeout config:9600000
2026-05-07 22:55:26 [Info] self_guard_mode config is 0
2026-05-07 22:55:27 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 22:55:27 [Info] ipc client:Rtap221161778165727_handler Reg client_name:Rtap221161778165727 on WhiteList
2026-05-07 22:55:27 [Info] start rtap process success, pid is 2568, argument is Rtap221161778165727
2026-05-07 22:55:28 [Info] system memory usage is 80
2026-05-07 22:55:29 [Info] system memory usage is 80
2026-05-07 22:55:30 [Info] system memory usage is 80
2026-05-07 22:55:30 [Info] csrss.exe open proc 2568 AliSecCheck.ex
2026-05-07 22:55:31 [Info] system memory usage is 80
2026-05-07 22:55:31 [Info] csrss.exe open thread 2568 AliSecCheck.ex
2026-05-07 22:55:32 [Info] system memory usage is 80
2026-05-07 22:55:32 [Info] csrss.exe open thread 2568 AliSecCheck.ex
2026-05-07 22:55:33 [Info] system memory usage is 80
2026-05-07 22:55:33 [Info] GetMessage : T_MSG_CHECK
2026-05-07 22:55:33 [Info] task 1c994e114307a9d703bdf2b1ca2568aa has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-07 22:55:34 [Info] system memory usage is 80
2026-05-07 22:55:35 [Info] system memory usage is 80
2026-05-07 22:55:36 [Info] system memory usage is 80
2026-05-07 22:55:37 [Info] system memory usage is 80
2026-05-07 22:55:38 [Info] system memory usage is 80
2026-05-07 22:55:39 [Info] system memory usage is 80
2026-05-07 22:55:40 [Info] system memory usage is 80
2026-05-07 22:55:41 [Info] system memory usage is 80
2026-05-07 22:55:42 [Info] system memory usage is 80
2026-05-07 22:55:43 [Info] system memory usage is 80
2026-05-07 22:55:44 [Info] system memory usage is 80
2026-05-07 22:55:45 [Info] system memory usage is 81
2026-05-07 22:55:46 [Info] system memory usage is 81
2026-05-07 22:55:47 [Info] system memory usage is 81
2026-05-07 22:55:48 [Info] system memory usage is 81
2026-05-07 22:55:48 [Info] csrss.exe open thread 2568 AliSecCheck.ex
2026-05-07 22:55:49 [Info] system memory usage is 81
2026-05-07 22:55:50 [Info] system memory usage is 81
2026-05-07 22:55:51 [Info] system memory usage is 81
2026-05-07 22:55:52 [Info] system memory usage is 81
2026-05-07 22:55:53 [Info] system memory usage is 81
2026-05-07 22:55:53 [Info] New ClientConnectNotify : Rtap221161778165727, id is 000004C8
2026-05-07 22:55:54 [Info] Rtap Platform Rtap221161778165727 execv work --windows-sysinfoext-check on pid 2568
2026-05-07 22:55:54 [Info] ipc client:Rtap221161778165727 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 22:55:59 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-07 22:55:59 [Info] ipc client:Rtap222211778165759_handler Reg client_name:Rtap222211778165759 on WhiteList
2026-05-07 22:55:59 [Info] start rtap process success, pid is 2716, argument is Rtap222211778165759
2026-05-07 22:56:00 [Info] system memory usage is 82
2026-05-07 22:56:00 [Info] New ClientConnectNotify : Rtap222211778165759, id is 00000504
2026-05-07 22:56:01 [Info] Rtap Platform Rtap222211778165759 execv work --windows-vul-check on pid 2716
2026-05-07 22:56:01 [Info] csrss.exe open proc 2716 AliSecCheck.ex
2026-05-07 22:56:02 [Info] ipc client:Rtap222211778165759 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-07 22:56:02 [Info] csrss.exe open thread 2716 AliSecCheck.ex
2026-05-07 22:56:36 [Info] Done Work --windows-vul-check:1
2026-05-07 22:56:36 [Info] Rtap Platform Rtap222211778165759 Exit:normal exit
2026-05-07 22:56:39 [Info] ClientDisConnectNotify : Rtap222211778165759, id is 00000504
2026-05-07 22:57:53 [Info] Done Work --windows-sysinfoext-check:1
2026-05-07 22:57:53 [Info] Rtap Platform Rtap221161778165727 Exit:normal exit
2026-05-07 22:57:55 [Info] ClientDisConnectNotify : Rtap221161778165727, id is 000004C8
2026-05-07 23:06:24 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12237","aliyundun_cpu_high_count":"1","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"8","aliyundun_max_mem":"12332","aliyundun_upload_time":"1778166384","aliyundun_write_pid_times":"0","ipc_send_count":"131","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-07 23:16:19 [Warn] high cpu, cpu is 32
2026-05-07 23:51:14 [Info] TotalPhys:2047,AvailPhys:427,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6433,AvailPageFile:1266,SelfWorkingSet:12244, SelfPageFile:13644
2026-05-07 23:51:14 [Info] CommitTotal:5166,CommitLimit:6433,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:427,SystemCache:339,KernelTotal:269,KernelPaged:180,KernelNonpaged:89,PageSize:4096,HandleCount:28265,ProcessCount:52,ThreadCount:769
2026-05-08 00:02:22 [Warn] high cpu, cpu is 39
2026-05-08 00:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"7","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"12239","aliyundun_cpu_high_count":"4","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"2","aliyundun_max_cpu":"39","aliyundun_max_mem":"12308","aliyundun_upload_time":"1778170000","aliyundun_write_pid_times":"0","ipc_send_count":"129","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-08 00:10:22 [Info] get meta data success by v2
2026-05-08 00:10:22 [Info] get empty metaserver config
2026-05-08 00:10:22 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-08 00:10:22 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-08 00:10:22 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-08 00:10:23 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-08 00:10:23 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-08 00:10:23 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-08 00:10:23 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-08 00:10:23 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-08 00:10:23 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-08 00:10:23 [Info] download cert compare md5 same
2026-05-08 00:10:23 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-08 00:10:23 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-08 00:10:23 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-14 00:26:36 [Warn] high cpu, cpu is 15
2026-05-14 01:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12677","aliyundun_cpu_high_count":"2","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"1","aliyundun_max_cpu":"15","aliyundun_max_mem":"12732","aliyundun_upload_time":"1778691970","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-14 01:18:06 [Info] TotalPhys:2047,AvailPhys:481,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6706,AvailPageFile:1506,SelfWorkingSet:12732, SelfPageFile:14172
2026-05-14 01:18:06 [Info] CommitTotal:5200,CommitLimit:6706,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:481,SystemCache:396,KernelTotal:280,KernelPaged:186,KernelNonpaged:93,PageSize:4096,HandleCount:28387,ProcessCount:52,ThreadCount:771
2026-05-14 01:22:54 [Warn] high cpu, cpu is 11
2026-05-14 01:31:46 [Warn] high cpu, cpu is 26
2026-05-14 01:45:41 [Info] GetMessage : T_MSG_CHECK
2026-05-14 01:45:41 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzg2OTQzNDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4NzM3NTQwLCJzdWIiOiJSVEFQX0lEWF8xODE0OTZfMTc3ODY5NDM0MDY1NyJ9.5uh96iLiqdh1BcOiutpvLjAyDs4mu3ORmFedLjP2zmo has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-14 01:45:48 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-14 01:45:48 [Info] ipc client:Rtap116661778694348_handler Reg client_name:Rtap116661778694348 on WhiteList
2026-05-14 01:45:48 [Info] start rtap process success, pid is 3004, argument is Rtap116661778694348
2026-05-14 01:45:50 [Info] csrss.exe open proc 3004 AliSecCheck.ex
2026-05-14 01:45:51 [Info] csrss.exe open thread 3004 AliSecCheck.ex
2026-05-14 01:45:52 [Info] csrss.exe open thread 3004 AliSecCheck.ex
2026-05-14 01:45:53 [Info] system memory usage is 80
2026-05-14 01:45:54 [Info] system memory usage is 80
2026-05-14 01:45:55 [Info] system memory usage is 80
2026-05-14 01:45:55 [Info] csrss.exe open thread 3004 AliSecCheck.ex
2026-05-14 01:45:59 [Info] csrss.exe open thread 3004 AliSecCheck.ex
2026-05-14 01:46:03 [Info] system memory usage is 80
2026-05-14 01:46:04 [Info] system memory usage is 80
2026-05-14 01:46:05 [Info] system memory usage is 80
2026-05-14 01:46:10 [Info] system memory usage is 80
2026-05-14 01:46:11 [Info] system memory usage is 80
2026-05-14 01:46:12 [Info] system memory usage is 80
2026-05-14 01:46:13 [Info] system memory usage is 80
2026-05-14 01:46:13 [Info] New ClientConnectNotify : Rtap116661778694348, id is 000004F4
2026-05-14 01:46:14 [Info] Rtap Platform Rtap116661778694348 execv work --sca on pid 3004
2026-05-14 01:46:15 [Info] ipc client:Rtap116661778694348 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-14 01:50:41 [Info] csrss.exe open thread 3004 AliSecCheck.ex
2026-05-14 01:53:13 [Warn] high cpu, cpu is 16
2026-05-14 01:54:36 [Info] Done Work --sca:1
2026-05-14 01:54:36 [Info] Rtap Platform Rtap116661778694348 Exit:normal exit
2026-05-14 01:54:39 [Info] ClientDisConnectNotify : Rtap116661778694348, id is 000004F4
2026-05-14 02:00:05 [Warn] high cpu, cpu is 26
2026-05-14 02:05:02 [Warn] high cpu, cpu is 11
2026-05-14 02:07:05 [Warn] high cpu, cpu is 16
2026-05-14 02:07:23 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"9","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12638","aliyundun_cpu_high_count":"8","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"6","aliyundun_max_cpu":"26","aliyundun_max_mem":"12736","aliyundun_upload_time":"1778695643","aliyundun_write_pid_times":"0","ipc_send_count":"67","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-14 02:10:17 [Warn] high cpu, cpu is 11
2026-05-14 02:18:11 [Info] TotalPhys:2047,AvailPhys:382,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6706,AvailPageFile:1396,SelfWorkingSet:12572, SelfPageFile:14012
2026-05-14 02:18:11 [Info] CommitTotal:5310,CommitLimit:6706,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:382,SystemCache:297,KernelTotal:277,KernelPaged:183,KernelNonpaged:94,PageSize:4096,HandleCount:28442,ProcessCount:52,ThreadCount:775
2026-05-14 02:23:09 [Warn] high cpu, cpu is 26
2026-05-14 02:23:40 [Warn] high cpu, cpu is 11
2026-05-14 02:25:42 [Warn] high cpu, cpu is 13
2026-05-14 02:32:56 [Warn] high cpu, cpu is 13
2026-05-14 02:33:15 [Warn] high cpu, cpu is 13
2026-05-14 03:03:41 [Info] get meta data success by v2
2026-05-14 03:03:41 [Info] get empty metaserver config
2026-05-14 03:03:41 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-14 03:03:41 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-14 03:03:41 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-14 03:03:42 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-14 03:03:42 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-14 03:03:42 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-14 03:03:42 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-14 03:03:42 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-14 03:03:42 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-14 03:03:42 [Info] download cert compare md5 same
2026-05-14 03:03:42 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-14 03:03:42 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-14 03:03:42 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-14 03:07:06 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"9","aliyundun_avg_fd_count":"327","aliyundun_avg_mem":"12565","aliyundun_cpu_high_count":"6","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"6","aliyundun_max_cpu":"26","aliyundun_max_mem":"12720","aliyundun_upload_time":"1778699226","aliyundun_write_pid_times":"0","ipc_send_count":"82","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}