| Server IP : 123.56.80.60 / Your IP : 216.73.216.78 Web Server : Apache/2.4.54 (Win32) OpenSSL/1.1.1s PHP/7.4.33 mod_fcgid/2.3.10-dev System : Windows NT iZhx3sob14hnz7Z 10.0 build 14393 (Windows Server 2016) i586 User : SYSTEM ( 0) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : C:/Program Files (x86)/Alibaba/Aegis/aegis_client/aegis_12_90/data/ |
Upload File : |
2026-04-29 00:24:37 [Info] TotalPhys:2047,AvailPhys:297,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1357,SelfWorkingSet:15764, SelfPageFile:12924
2026-04-29 00:24:37 [Info] CommitTotal:5247,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:297,SystemCache:209,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27560,ProcessCount:52,ThreadCount:768
2026-04-29 00:55:19 [Info] get meta data success by v2
2026-04-29 00:55:19 [Info] get empty metaserver config
2026-04-29 00:55:19 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 00:55:19 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 00:55:19 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 00:55:19 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 00:55:19 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 00:55:19 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 00:55:19 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 00:55:19 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 00:55:19 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 00:55:19 [Info] download cert compare md5 same
2026-04-29 00:55:19 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 00:55:19 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 00:55:19 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 01:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15780","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"15916","aliyundun_upload_time":"1777395975","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 01:24:54 [Info] TotalPhys:2047,AvailPhys:328,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1345,SelfWorkingSet:15824, SelfPageFile:12952
2026-04-29 01:24:54 [Info] CommitTotal:5259,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:328,SystemCache:119,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27698,ProcessCount:52,ThreadCount:782
2026-04-29 01:46:41 [Info] GetMessage : T_MSG_CHECK
2026-04-29 01:46:41 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzczOTg0MDEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3MzM0MDg2LCJleHAiOjE3Nzc0NDE2MDEsInN1YiI6IlJUQVBfSURYXzE4MDM2OV8xNzc3Mzk4NDAxMTIyIn0.iB5k7iE6e7FaC7Bkx5B5Qzr_qekjMKU7ZZj8BsRvkdw has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 01:46:47 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 01:46:47 [Info] ipc client:Rtap67401777398407_handler Reg client_name:Rtap67401777398407 on WhiteList
2026-04-29 01:46:47 [Info] start rtap process success, pid is 2680, argument is Rtap67401777398407
2026-04-29 01:46:47 [Info] New ClientConnectNotify : Rtap67401777398407, id is 000004B4
2026-04-29 01:46:47 [Info] ipc client:Rtap67401777398407 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 01:46:48 [Info] Rtap Platform Rtap67401777398407 execv work --sca on pid 2680
2026-04-29 01:46:50 [Info] csrss.exe open proc 2680 AliSecCheck.ex
2026-04-29 01:46:51 [Info] csrss.exe open thread 2680 AliSecCheck.ex
2026-04-29 01:47:15 [Info] csrss.exe open thread 2680 AliSecCheck.ex
2026-04-29 01:47:39 [Info] Done Work --sca:1
2026-04-29 01:47:39 [Info] Rtap Platform Rtap67401777398407 Exit:normal exit
2026-04-29 01:47:41 [Info] ClientDisConnectNotify : Rtap67401777398407, id is 000004B4
2026-04-29 02:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15802","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15892","aliyundun_upload_time":"1777399596","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 02:25:10 [Info] TotalPhys:2047,AvailPhys:334,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1359,SelfWorkingSet:15828, SelfPageFile:12960
2026-04-29 02:25:10 [Info] CommitTotal:5245,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:334,SystemCache:166,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27655,ProcessCount:52,ThreadCount:766
2026-04-29 03:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15804","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15868","aliyundun_upload_time":"1777403196","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 03:25:28 [Info] TotalPhys:2047,AvailPhys:330,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1355,SelfWorkingSet:15700, SelfPageFile:12736
2026-04-29 03:25:28 [Info] CommitTotal:5250,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:330,SystemCache:175,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27586,ProcessCount:52,ThreadCount:771
2026-04-29 04:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15807","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15848","aliyundun_upload_time":"1777406781","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 04:11:08 [Info] get meta data success by v2
2026-04-29 04:11:08 [Info] get empty metaserver config
2026-04-29 04:11:08 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 04:11:08 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 04:11:08 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 04:11:09 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 04:11:09 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 04:11:09 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 04:11:09 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 04:11:09 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 04:11:09 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 04:11:09 [Info] download cert compare md5 same
2026-04-29 04:11:09 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 04:11:09 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 04:11:09 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 04:25:45 [Info] TotalPhys:2047,AvailPhys:337,TotalVirtual:2047,AvailVirtual:1982,TotalPageFile:6605,AvailPageFile:1364,SelfWorkingSet:15884, SelfPageFile:13100
2026-04-29 04:25:45 [Info] CommitTotal:5241,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:337,SystemCache:214,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27580,ProcessCount:52,ThreadCount:768
2026-04-29 05:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15838","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"15972","aliyundun_upload_time":"1777410397","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 05:16:26 [Info] nCurrentClock is 36003100, nCurrentTime is 1777410986
2026-04-29 05:16:26 [Info] SendMessage T_MSG_LOGIN
2026-04-29 05:16:26 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-29 05:16:26 [Info] begin to enable self guard after reconnect
2026-04-29 05:16:26 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-29 05:16:26 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-29 05:16:26 [Info] GetMessage : T_MSG_CHECK
2026-04-29 05:16:26 [Info] task 65244e4b-1055-46c5-add4-9c136220eeed has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 05:16:29 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-29 05:16:29 [Info] key : cpu, value : 10
2026-04-29 05:16:29 [Info] key : rio, value : 20480
2026-04-29 05:16:29 [Info] key : wio, value : 20480
2026-04-29 05:16:29 [Info] key : cpu_all, value : 0
2026-04-29 05:16:29 [Info] key : max_pid_check, value : 200
2026-04-29 05:16:29 [Info] key : throw_dump, value : 0
2026-04-29 05:16:29 [Info] key : hash_mode, value : 1
2026-04-29 05:16:29 [Info] key : mem, value : 200
2026-04-29 05:16:29 [Info] can not find key max_fd in online conf
2026-04-29 05:16:29 [Info] key : proc_limit, value : 1
2026-04-29 05:16:29 [Info] key : resource_limit_mode, value : 3
2026-04-29 05:16:29 [Info] key : rtap_update_mode, value : 1
2026-04-29 05:16:29 [Info] can not find key debug in online conf
2026-04-29 05:16:29 [Info] can not find key update_mode in online conf
2026-04-29 05:16:29 [Info] can not find key http_mode in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_enable in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_new_agent in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-29 05:16:29 [Info] can not find key mem_low_mark in online conf
2026-04-29 05:16:29 [Info] can not find key obnormal_report_interval in online conf
2026-04-29 05:16:29 [Info] key : cache_mode, value : 0
2026-04-29 05:16:29 [Info] key : abnormal_monitor_mode, value : 3
2026-04-29 05:16:29 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-29 05:16:29 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-29 05:16:29 [Info] key : queue_size_ratio, value : 80
2026-04-29 05:16:29 [Info] queue_size_ratio is 80
2026-04-29 05:16:29 [Info] resource limit mode and max limit cpu is not change
2026-04-29 05:16:29 [Info] set hash mode 1
2026-04-29 05:16:29 [Info] RTAP timeout config:9600000
2026-04-29 05:16:29 [Info] self_guard_mode config is 0
2026-04-29 05:16:33 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 05:16:33 [Info] ipc client:Rtap150731777410993_handler Reg client_name:Rtap150731777410993 on WhiteList
2026-04-29 05:16:33 [Info] start rtap process success, pid is 4276, argument is Rtap150731777410993
2026-04-29 05:16:33 [Info] New ClientConnectNotify : Rtap150731777410993, id is 0000052C
2026-04-29 05:16:34 [Info] ipc client:Rtap150731777410993 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 05:16:34 [Info] Rtap Platform Rtap150731777410993 execv work --windows-sysinfoext-check on pid 4276
2026-04-29 05:16:36 [Info] csrss.exe open proc 4276 AliSecCheck.ex
2026-04-29 05:16:37 [Info] csrss.exe open thread 4276 AliSecCheck.ex
2026-04-29 05:16:41 [Info] Done Work --windows-sysinfoext-check:1
2026-04-29 05:16:41 [Info] Rtap Platform Rtap150731777410993 Exit:normal exit
2026-04-29 05:16:43 [Info] ClientDisConnectNotify : Rtap150731777410993, id is 0000052C
2026-04-29 05:26:01 [Info] TotalPhys:2047,AvailPhys:337,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1365,SelfWorkingSet:15848, SelfPageFile:12916
2026-04-29 05:26:01 [Info] CommitTotal:5239,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:337,SystemCache:217,KernelTotal:263,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27828,ProcessCount:53,ThreadCount:777
2026-04-29 06:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15876","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15948","aliyundun_upload_time":"1777413981","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 06:26:18 [Info] TotalPhys:2047,AvailPhys:316,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1355,SelfWorkingSet:15920, SelfPageFile:13092
2026-04-29 06:26:18 [Info] CommitTotal:5249,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:316,SystemCache:212,KernelTotal:264,KernelPaged:172,KernelNonpaged:92,PageSize:4096,HandleCount:27647,ProcessCount:52,ThreadCount:764
2026-04-29 07:06:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15910","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15984","aliyundun_upload_time":"1777417593","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 07:26:35 [Info] TotalPhys:2047,AvailPhys:316,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1360,SelfWorkingSet:16028, SelfPageFile:13136
2026-04-29 07:26:35 [Info] CommitTotal:5244,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:316,SystemCache:185,KernelTotal:265,KernelPaged:173,KernelNonpaged:92,PageSize:4096,HandleCount:27626,ProcessCount:52,ThreadCount:759
2026-04-29 07:27:08 [Info] get meta data success by v2
2026-04-29 07:27:08 [Info] get empty metaserver config
2026-04-29 07:27:08 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 07:27:08 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 07:27:08 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 07:27:08 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 07:27:08 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 07:27:08 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 07:27:08 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 07:27:08 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 07:27:08 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 07:27:08 [Info] download cert compare md5 same
2026-04-29 07:27:08 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 07:27:08 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 07:27:08 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 07:45:00 [Info] GetMessage : T_MSG_CHECK
2026-04-29 07:45:00 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0MTk5MDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDYzMTAwLCJzdWIiOiJSVEFQX0lEWF8xODAzNzFfMTc3NzQxOTkwMDEzNyJ9.MuJQHz6hYK8XP4ryB-5wRpIc0c5HxZ-z-9MXJDXAfF0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 07:45:05 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 07:45:05 [Info] ipc client:Rtap114081777419905_handler Reg client_name:Rtap114081777419905 on WhiteList
2026-04-29 07:45:05 [Info] start rtap process success, pid is 5040, argument is Rtap114081777419905
2026-04-29 07:45:05 [Info] New ClientConnectNotify : Rtap114081777419905, id is 00000540
2026-04-29 07:45:05 [Info] ipc client:Rtap114081777419905 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 07:45:05 [Info] Rtap Platform Rtap114081777419905 execv work --windows-vul-clean on pid 5040
2026-04-29 07:45:07 [Info] csrss.exe open proc 5040 AliSecCheck.ex
2026-04-29 07:45:08 [Info] csrss.exe open thread 5040 AliSecCheck.ex
2026-04-29 07:45:13 [Info] Done Work --windows-vul-clean:1
2026-04-29 07:45:13 [Info] Rtap Platform Rtap114081777419905 Exit:normal exit
2026-04-29 07:45:15 [Info] ClientDisConnectNotify : Rtap114081777419905, id is 00000540
2026-04-29 08:06:19 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15934","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16156","aliyundun_upload_time":"1777421179","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 08:26:51 [Info] TotalPhys:2047,AvailPhys:332,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1356,SelfWorkingSet:15888, SelfPageFile:12996
2026-04-29 08:26:51 [Info] CommitTotal:5248,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:332,SystemCache:185,KernelTotal:266,KernelPaged:174,KernelNonpaged:92,PageSize:4096,HandleCount:27625,ProcessCount:52,ThreadCount:761
2026-04-29 08:43:32 [Info] GetMessage : T_MSG_CHECK
2026-04-29 08:43:32 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0MjM0MTIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDY2NjEyLCJzdWIiOiJSVEFQX0lEWF8xODAzNjBfMTc3NzQyMzQxMjE1NSJ9.Ub5_-zrk4R1KOPBt6Ahpc0svTNNy10-qUIKAvr2DWBM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 08:43:37 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 08:43:37 [Info] ipc client:Rtap228761777423417_handler Reg client_name:Rtap228761777423417 on WhiteList
2026-04-29 08:43:37 [Info] start rtap process success, pid is 792, argument is Rtap228761777423417
2026-04-29 08:43:37 [Info] New ClientConnectNotify : Rtap228761777423417, id is 000004B4
2026-04-29 08:43:37 [Info] ipc client:Rtap228761777423417 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 08:43:37 [Info] Rtap Platform Rtap228761777423417 execv work --windows-process-check on pid 792
2026-04-29 08:43:38 [Info] csrss.exe open proc 792 AliSecCheck.ex
2026-04-29 08:43:39 [Info] csrss.exe open thread 792 AliSecCheck.ex
2026-04-29 08:44:00 [Info] Done Work --windows-process-check:1
2026-04-29 08:44:00 [Info] Rtap Platform Rtap228761777423417 Exit:normal exit
2026-04-29 08:44:02 [Info] ClientDisConnectNotify : Rtap228761777423417, id is 000004B4
2026-04-29 09:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15943","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16064","aliyundun_upload_time":"1777424776","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 09:27:05 [Info] TotalPhys:2047,AvailPhys:312,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1339,SelfWorkingSet:16004, SelfPageFile:13124
2026-04-29 09:27:05 [Info] CommitTotal:5265,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:312,SystemCache:218,KernelTotal:269,KernelPaged:174,KernelNonpaged:95,PageSize:4096,HandleCount:27786,ProcessCount:52,ThreadCount:766
2026-04-29 10:06:28 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"4","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15975","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16052","aliyundun_upload_time":"1777428388","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 10:25:21 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:25:21 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0Mjk1MjEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDcyNzIxLCJzdWIiOiJSVEFQX0lEWF8xODAzNjhfMTc3NzQyOTUyMTI4MSJ9.uQrxLfmlqov7jarNtj0GHzxEVOISArV5b5Tr9gTOYT0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:25:25 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:25:25 [Info] ipc client:Rtap100541777429525_handler Reg client_name:Rtap100541777429525 on WhiteList
2026-04-29 10:25:25 [Info] start rtap process success, pid is 3208, argument is Rtap100541777429525
2026-04-29 10:25:25 [Info] New ClientConnectNotify : Rtap100541777429525, id is 00000548
2026-04-29 10:25:25 [Info] ipc client:Rtap100541777429525 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:25:26 [Info] Rtap Platform Rtap100541777429525 execv work --windows-registry-check on pid 3208
2026-04-29 10:25:26 [Info] csrss.exe open proc 3208 AliSecCheck.ex
2026-04-29 10:25:27 [Info] csrss.exe open thread 3208 AliSecCheck.ex
2026-04-29 10:26:01 [Info] Done Work --windows-registry-check:1
2026-04-29 10:26:01 [Info] Rtap Platform Rtap100541777429525 Exit:normal exit
2026-04-29 10:26:03 [Info] ClientDisConnectNotify : Rtap100541777429525, id is 00000548
2026-04-29 10:26:28 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:26:28 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0Mjk1ODgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDcyNzg4LCJzdWIiOiJSVEFQX0lEWF8xODAzNzRfMTc3NzQyOTU4ODE1MSJ9.0e0iLa6icWnFAhc1JExEkpteQNaaVzvoZkv4-tngQwM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:26:33 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:26:33 [Info] ipc client:Rtap102761777429593_handler Reg client_name:Rtap102761777429593 on WhiteList
2026-04-29 10:26:33 [Info] start rtap process success, pid is 1424, argument is Rtap102761777429593
2026-04-29 10:26:33 [Info] New ClientConnectNotify : Rtap102761777429593, id is 00000540
2026-04-29 10:26:33 [Info] ipc client:Rtap102761777429593 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:26:33 [Info] Rtap Platform Rtap102761777429593 execv work --windows-driver-version-check on pid 1424
2026-04-29 10:26:35 [Info] csrss.exe open proc 1424 AliSecCheck.ex
2026-04-29 10:26:36 [Info] csrss.exe open thread 1424 AliSecCheck.ex
2026-04-29 10:26:40 [Info] Done Work --windows-driver-version-check:1
2026-04-29 10:26:40 [Info] Rtap Platform Rtap102761777429593 Exit:normal exit
2026-04-29 10:26:43 [Info] ClientDisConnectNotify : Rtap102761777429593, id is 00000540
2026-04-29 10:27:21 [Info] TotalPhys:2047,AvailPhys:321,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1363,SelfWorkingSet:15952, SelfPageFile:13108
2026-04-29 10:27:21 [Info] CommitTotal:5241,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:321,SystemCache:227,KernelTotal:266,KernelPaged:173,KernelNonpaged:92,PageSize:4096,HandleCount:27676,ProcessCount:52,ThreadCount:760
2026-04-29 10:31:09 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:31:09 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0Mjk4NjksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDczMDY5LCJzdWIiOiJSVEFQX0lEWF8xODAzNjFfMTc3NzQyOTg2OTkwNyJ9.SZ6ojYNs19A5PHLwRYfmYOTsPmkIFtSM40Ey6x7jZnM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:31:14 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:31:14 [Info] ipc client:Rtap111941777429874_handler Reg client_name:Rtap111941777429874 on WhiteList
2026-04-29 10:31:14 [Info] start rtap process success, pid is 5016, argument is Rtap111941777429874
2026-04-29 10:31:14 [Info] New ClientConnectNotify : Rtap111941777429874, id is 000004B4
2026-04-29 10:31:14 [Info] ipc client:Rtap111941777429874 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:31:14 [Info] Rtap Platform Rtap111941777429874 execv work --tcp-connect-check on pid 5016
2026-04-29 10:31:15 [Info] csrss.exe open proc 5016 AliSecCheck.ex
2026-04-29 10:31:16 [Info] csrss.exe open thread 5016 AliSecCheck.ex
2026-04-29 10:31:25 [Info] Done Work --tcp-connect-check:1
2026-04-29 10:31:25 [Info] Rtap Platform Rtap111941777429874 Exit:normal exit
2026-04-29 10:31:27 [Info] ClientDisConnectNotify : Rtap111941777429874, id is 000004B4
2026-04-29 10:32:10 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:32:10 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0Mjk5MjksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDczMTI5LCJzdWIiOiJSVEFQX0lEWF8xODAzNjNfMTc3NzQyOTkyOTg5MyJ9.Trstq-PcPyfgLutWjc5pNBSJD83IEZLvNjnMdy2iySs has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:32:13 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:32:13 [Info] ipc client:Rtap113871777429933_handler Reg client_name:Rtap113871777429933 on WhiteList
2026-04-29 10:32:13 [Info] start rtap process success, pid is 2808, argument is Rtap113871777429933
2026-04-29 10:32:13 [Info] New ClientConnectNotify : Rtap113871777429933, id is 00000540
2026-04-29 10:32:13 [Info] ipc client:Rtap113871777429933 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:32:14 [Info] Rtap Platform Rtap113871777429933 execv work --windows-schedule-task-check on pid 2808
2026-04-29 10:32:15 [Info] csrss.exe open proc 2808 AliSecCheck.ex
2026-04-29 10:32:16 [Info] csrss.exe open thread 2808 AliSecCheck.ex
2026-04-29 10:32:49 [Info] Done Work --windows-schedule-task-check:1
2026-04-29 10:32:49 [Info] Rtap Platform Rtap113871777429933 Exit:normal exit
2026-04-29 10:32:51 [Info] ClientDisConnectNotify : Rtap113871777429933, id is 00000540
2026-04-29 10:42:15 [Info] get meta data success by v2
2026-04-29 10:42:15 [Info] get empty metaserver config
2026-04-29 10:42:15 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 10:42:16 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 10:42:16 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 10:42:16 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 10:42:16 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 10:42:16 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 10:42:16 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 10:42:16 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 10:42:16 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 10:42:16 [Info] download cert compare md5 same
2026-04-29 10:42:16 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 10:42:16 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 10:42:16 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 10:42:16 [Info] nCurrentClock is 54004200, nCurrentTime is 1777430536
2026-04-29 10:42:16 [Info] SendMessage T_MSG_LOGIN
2026-04-29 10:42:16 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-29 10:42:16 [Info] begin to enable self guard after reconnect
2026-04-29 10:42:16 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-29 10:42:16 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-29 10:42:17 [Info] GetMessage : T_MSG_CHECK
2026-04-29 10:42:17 [Info] task 2e32e833-f5e1-441c-a4e3-7d89b52a93b8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 10:42:19 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-04-29 10:42:19 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-29 10:42:19 [Info] key : cpu, value : 10
2026-04-29 10:42:19 [Info] key : rio, value : 20480
2026-04-29 10:42:19 [Info] key : wio, value : 20480
2026-04-29 10:42:19 [Info] key : cpu_all, value : 0
2026-04-29 10:42:19 [Info] key : max_pid_check, value : 200
2026-04-29 10:42:19 [Info] key : throw_dump, value : 0
2026-04-29 10:42:19 [Info] key : hash_mode, value : 1
2026-04-29 10:42:19 [Info] key : mem, value : 200
2026-04-29 10:42:19 [Info] can not find key max_fd in online conf
2026-04-29 10:42:19 [Info] key : proc_limit, value : 1
2026-04-29 10:42:19 [Info] key : resource_limit_mode, value : 3
2026-04-29 10:42:19 [Info] key : rtap_update_mode, value : 1
2026-04-29 10:42:19 [Info] can not find key debug in online conf
2026-04-29 10:42:19 [Info] can not find key update_mode in online conf
2026-04-29 10:42:19 [Info] can not find key http_mode in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_enable in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_new_agent in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-29 10:42:19 [Info] can not find key mem_low_mark in online conf
2026-04-29 10:42:19 [Info] can not find key obnormal_report_interval in online conf
2026-04-29 10:42:19 [Info] key : cache_mode, value : 0
2026-04-29 10:42:19 [Info] key : abnormal_monitor_mode, value : 3
2026-04-29 10:42:19 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-29 10:42:19 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-29 10:42:19 [Info] key : queue_size_ratio, value : 80
2026-04-29 10:42:19 [Info] queue_size_ratio is 80
2026-04-29 10:42:19 [Info] resource limit mode and max limit cpu is not change
2026-04-29 10:42:19 [Info] set hash mode 1
2026-04-29 10:42:19 [Info] RTAP timeout config:9600000
2026-04-29 10:42:19 [Info] self_guard_mode config is 0
2026-04-29 10:42:20 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 10:42:20 [Info] ipc client:Rtap133691777430540_handler Reg client_name:Rtap133691777430540 on WhiteList
2026-04-29 10:42:20 [Info] start rtap process success, pid is 2656, argument is Rtap133691777430540
2026-04-29 10:42:21 [Info] New ClientConnectNotify : Rtap133691777430540, id is 000004B4
2026-04-29 10:42:22 [Info] Rtap Platform Rtap133691777430540 execv work --windows-sysinfoext-check on pid 2656
2026-04-29 10:42:22 [Info] csrss.exe open proc 2656 AliSecCheck.ex
2026-04-29 10:42:23 [Info] csrss.exe open thread 2656 AliSecCheck.ex
2026-04-29 10:42:24 [Info] ipc client:Rtap133691777430540 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 10:42:33 [Info] Done Work --windows-sysinfoext-check:1
2026-04-29 10:42:33 [Info] Rtap Platform Rtap133691777430540 Exit:normal exit
2026-04-29 10:42:35 [Info] ClientDisConnectNotify : Rtap133691777430540, id is 000004B4
2026-04-29 11:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15919","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16008","aliyundun_upload_time":"1777431999","aliyundun_write_pid_times":"0","ipc_send_count":"161","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 11:11:47 [Info] GetMessage : T_MSG_CHECK
2026-04-29 11:11:47 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0MzIzMDcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NDc1NTA3LCJzdWIiOiJSVEFQX0lEWF8xODAzNjVfMTc3NzQzMjMwNzU2MyJ9.HAEMQtibmBgr2GUVEyTj_UQdH5otkLDxm8g6W0j6e4w has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 11:11:54 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 11:11:54 [Info] ipc client:Rtap191621777432314_handler Reg client_name:Rtap191621777432314 on WhiteList
2026-04-29 11:11:54 [Info] start rtap process success, pid is 3208, argument is Rtap191621777432314
2026-04-29 11:11:54 [Info] New ClientConnectNotify : Rtap191621777432314, id is 00000504
2026-04-29 11:11:54 [Info] ipc client:Rtap191621777432314 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 11:11:54 [Info] Rtap Platform Rtap191621777432314 execv work --windows-autorun-item-check on pid 3208
2026-04-29 11:11:55 [Info] csrss.exe open proc 3208 AliSecCheck.ex
2026-04-29 11:11:56 [Info] csrss.exe open thread 3208 AliSecCheck.ex
2026-04-29 11:12:09 [Info] Done Work --windows-autorun-item-check:1
2026-04-29 11:12:09 [Info] Rtap Platform Rtap191621777432314 Exit:normal exit
2026-04-29 11:12:11 [Info] ClientDisConnectNotify : Rtap191621777432314, id is 00000504
2026-04-29 11:27:40 [Info] TotalPhys:2047,AvailPhys:347,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1374,SelfWorkingSet:15780, SelfPageFile:12792
2026-04-29 11:27:40 [Info] CommitTotal:5231,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:347,SystemCache:162,KernelTotal:262,KernelPaged:169,KernelNonpaged:92,PageSize:4096,HandleCount:27676,ProcessCount:52,ThreadCount:758
2026-04-29 12:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15866","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15976","aliyundun_upload_time":"1777435598","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 12:27:56 [Info] TotalPhys:2047,AvailPhys:353,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1369,SelfWorkingSet:15892, SelfPageFile:12964
2026-04-29 12:27:56 [Info] CommitTotal:5236,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:353,SystemCache:164,KernelTotal:262,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27705,ProcessCount:52,ThreadCount:764
2026-04-29 13:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15874","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"15976","aliyundun_upload_time":"1777439173","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 13:28:13 [Info] TotalPhys:2047,AvailPhys:334,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6605,AvailPageFile:1361,SelfWorkingSet:15848, SelfPageFile:13132
2026-04-29 13:28:13 [Info] CommitTotal:5243,CommitLimit:6605,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:334,SystemCache:166,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27673,ProcessCount:52,ThreadCount:759
2026-04-29 13:58:17 [Info] get meta data success by v2
2026-04-29 13:58:17 [Info] get empty metaserver config
2026-04-29 13:58:17 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 13:58:18 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 13:58:18 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 13:58:18 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 13:58:18 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 13:58:18 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 13:58:18 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 13:58:18 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 13:58:18 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 13:58:18 [Info] download cert compare md5 same
2026-04-29 13:58:18 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 13:58:18 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 13:58:18 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 14:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15884","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16020","aliyundun_upload_time":"1777442778","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 14:28:29 [Info] TotalPhys:2047,AvailPhys:424,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1447,SelfWorkingSet:16056, SelfPageFile:13288
2026-04-29 14:28:29 [Info] CommitTotal:5221,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:424,SystemCache:215,KernelTotal:262,KernelPaged:169,KernelNonpaged:92,PageSize:4096,HandleCount:27852,ProcessCount:52,ThreadCount:779
2026-04-29 15:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15940","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"6","aliyundun_max_mem":"16056","aliyundun_upload_time":"1777446396","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 15:28:46 [Info] TotalPhys:2047,AvailPhys:422,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1443,SelfWorkingSet:15892, SelfPageFile:13072
2026-04-29 15:28:46 [Info] CommitTotal:5225,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:422,SystemCache:231,KernelTotal:262,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27662,ProcessCount:52,ThreadCount:757
2026-04-29 16:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15929","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16016","aliyundun_upload_time":"1777449981","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 16:09:00 [Info] nCurrentClock is 72005200, nCurrentTime is 1777450140
2026-04-29 16:09:01 [Info] SendMessage T_MSG_LOGIN
2026-04-29 16:09:01 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-29 16:09:01 [Info] begin to enable self guard after reconnect
2026-04-29 16:09:01 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-29 16:09:01 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-29 16:09:01 [Info] GetMessage : T_MSG_CHECK
2026-04-29 16:09:01 [Info] task 8759db55-63c0-4c32-a3e3-c6b64072b859 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 16:09:03 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-29 16:09:03 [Info] key : cpu, value : 10
2026-04-29 16:09:03 [Info] key : rio, value : 20480
2026-04-29 16:09:03 [Info] key : wio, value : 20480
2026-04-29 16:09:03 [Info] key : cpu_all, value : 0
2026-04-29 16:09:03 [Info] key : max_pid_check, value : 200
2026-04-29 16:09:03 [Info] key : throw_dump, value : 0
2026-04-29 16:09:03 [Info] key : hash_mode, value : 1
2026-04-29 16:09:03 [Info] key : mem, value : 200
2026-04-29 16:09:03 [Info] can not find key max_fd in online conf
2026-04-29 16:09:03 [Info] key : proc_limit, value : 1
2026-04-29 16:09:03 [Info] key : resource_limit_mode, value : 3
2026-04-29 16:09:03 [Info] key : rtap_update_mode, value : 1
2026-04-29 16:09:03 [Info] can not find key debug in online conf
2026-04-29 16:09:03 [Info] can not find key update_mode in online conf
2026-04-29 16:09:03 [Info] can not find key http_mode in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_enable in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_new_agent in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-29 16:09:03 [Info] can not find key mem_low_mark in online conf
2026-04-29 16:09:03 [Info] can not find key obnormal_report_interval in online conf
2026-04-29 16:09:03 [Info] key : cache_mode, value : 0
2026-04-29 16:09:03 [Info] key : abnormal_monitor_mode, value : 3
2026-04-29 16:09:03 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-29 16:09:03 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-29 16:09:03 [Info] key : queue_size_ratio, value : 80
2026-04-29 16:09:03 [Info] queue_size_ratio is 80
2026-04-29 16:09:03 [Info] resource limit mode and max limit cpu is not change
2026-04-29 16:09:03 [Info] set hash mode 1
2026-04-29 16:09:03 [Info] RTAP timeout config:9600000
2026-04-29 16:09:03 [Info] self_guard_mode config is 0
2026-04-29 16:09:05 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 16:09:05 [Info] ipc client:Rtap118551777450145_handler Reg client_name:Rtap118551777450145 on WhiteList
2026-04-29 16:09:05 [Info] start rtap process success, pid is 612, argument is Rtap118551777450145
2026-04-29 16:09:06 [Info] system memory usage is 82
2026-04-29 16:09:07 [Info] system memory usage is 82
2026-04-29 16:09:07 [Info] csrss.exe open proc 612 AliSecCheck.ex
2026-04-29 16:09:07 [Info] system memory usage is 82
2026-04-29 16:09:08 [Info] system memory usage is 82
2026-04-29 16:09:08 [Info] csrss.exe open thread 612 AliSecCheck.ex
2026-04-29 16:09:08 [Info] system memory usage is 82
2026-04-29 16:09:09 [Info] system memory usage is 82
2026-04-29 16:09:09 [Info] csrss.exe open thread 612 AliSecCheck.ex
2026-04-29 16:09:10 [Info] system memory usage is 83
2026-04-29 16:09:10 [Info] New ClientConnectNotify : Rtap118551777450145, id is 00000524
2026-04-29 16:09:10 [Info] Rtap Platform Rtap118551777450145 execv work --windows-sysinfoext-check on pid 612
2026-04-29 16:09:10 [Info] csrss.exe open thread 612 AliSecCheck.ex
2026-04-29 16:09:10 [Info] ipc client:Rtap118551777450145 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 16:09:11 [Info] csrss.exe open thread 612 AliSecCheck.ex
2026-04-29 16:09:21 [Info] Done Work --windows-sysinfoext-check:1
2026-04-29 16:09:21 [Info] Rtap Platform Rtap118551777450145 Exit:normal exit
2026-04-29 16:09:23 [Info] ClientDisConnectNotify : Rtap118551777450145, id is 00000524
2026-04-29 16:29:04 [Info] TotalPhys:2047,AvailPhys:379,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1408,SelfWorkingSet:15936, SelfPageFile:12960
2026-04-29 16:29:04 [Info] CommitTotal:5260,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:379,SystemCache:246,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27875,ProcessCount:53,ThreadCount:769
2026-04-29 17:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15997","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16120","aliyundun_upload_time":"1777453576","aliyundun_write_pid_times":"0","ipc_send_count":"145","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 17:14:24 [Info] get meta data success by v2
2026-04-29 17:14:24 [Info] get empty metaserver config
2026-04-29 17:14:24 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 17:14:24 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 17:14:24 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 17:14:24 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 17:14:24 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 17:14:24 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 17:14:24 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 17:14:24 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 17:14:25 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 17:14:25 [Info] download cert compare md5 same
2026-04-29 17:14:25 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 17:14:25 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 17:14:25 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 17:29:21 [Info] TotalPhys:2047,AvailPhys:394,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1426,SelfWorkingSet:16052, SelfPageFile:13252
2026-04-29 17:29:21 [Info] CommitTotal:5243,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:394,SystemCache:250,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27665,ProcessCount:52,ThreadCount:767
2026-04-29 18:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16021","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16184","aliyundun_upload_time":"1777457185","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 18:07:55 [Info] GetMessage : T_MSG_CHECK
2026-04-29 18:07:55 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc0NTcyNzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3NTAwNDc1LCJleHAiOjE3NzczMzQwODYsInN1YiI6IlJUQVBfSURYXzE4MDQzMF8xNzc3NDU3Mjc1NDU1Iiwic3ViIjoiUlRBUF9JRFhfektsWmxfMTc3NzI5MDg4Njg0Ml85MjZlYjI1YTQ3YWE1MDYxYWJmMGFkMTc2YTEwNmEzYiJ9.MpDJ2L5harc9vtr-e3o_sZO_N0q4hB6sKRGvE1mN2eM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 18:07:59 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 18:07:59 [Info] ipc client:Rtap23831777457279_handler Reg client_name:Rtap23831777457279 on WhiteList
2026-04-29 18:07:59 [Info] start rtap process success, pid is 3896, argument is Rtap23831777457279
2026-04-29 18:07:59 [Info] New ClientConnectNotify : Rtap23831777457279, id is 0000052C
2026-04-29 18:07:59 [Info] ipc client:Rtap23831777457279 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 18:08:00 [Info] Rtap Platform Rtap23831777457279 execv work --secnet_rasp_agent on pid 3896
2026-04-29 18:08:02 [Info] csrss.exe open proc 3896 AliSecCheck.ex
2026-04-29 18:08:03 [Info] csrss.exe open thread 3896 AliSecCheck.ex
2026-04-29 18:08:04 [Info] csrss.exe open thread 3896 AliSecCheck.ex
2026-04-29 18:08:07 [Info] Done Work --secnet_rasp_agent:1
2026-04-29 18:08:07 [Info] Rtap Platform Rtap23831777457279 Exit:normal exit
2026-04-29 18:08:09 [Info] ClientDisConnectNotify : Rtap23831777457279, id is 0000052C
2026-04-29 18:29:39 [Info] TotalPhys:2047,AvailPhys:397,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1429,SelfWorkingSet:15892, SelfPageFile:13084
2026-04-29 18:29:39 [Info] CommitTotal:5239,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:397,SystemCache:250,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27661,ProcessCount:52,ThreadCount:761
2026-04-29 19:06:13 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15985","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16108","aliyundun_upload_time":"1777460773","aliyundun_write_pid_times":"0","ipc_send_count":"142","login_time":"0","mem_usage":"80","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 19:29:55 [Info] TotalPhys:2047,AvailPhys:401,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1433,SelfWorkingSet:15880, SelfPageFile:12828
2026-04-29 19:29:55 [Info] CommitTotal:5235,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:401,SystemCache:250,KernelTotal:263,KernelPaged:170,KernelNonpaged:92,PageSize:4096,HandleCount:27663,ProcessCount:52,ThreadCount:758
2026-04-29 20:06:23 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15980","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16124","aliyundun_upload_time":"1777464383","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 20:30:12 [Info] TotalPhys:2047,AvailPhys:393,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1424,SelfWorkingSet:16008, SelfPageFile:13284
2026-04-29 20:30:12 [Info] CommitTotal:5244,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:393,SystemCache:255,KernelTotal:264,KernelPaged:171,KernelNonpaged:92,PageSize:4096,HandleCount:27669,ProcessCount:52,ThreadCount:759
2026-04-29 20:30:16 [Info] get meta data success by v2
2026-04-29 20:30:16 [Info] get empty metaserver config
2026-04-29 20:30:16 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 20:30:16 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 20:30:16 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 20:30:16 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 20:30:16 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 20:30:16 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 20:30:16 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 20:30:16 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 20:30:16 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 20:30:16 [Info] download cert compare md5 same
2026-04-29 20:30:16 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 20:30:16 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 20:30:16 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-29 21:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16039","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16192","aliyundun_upload_time":"1777468000","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-04-29 21:30:36 [Info] TotalPhys:2047,AvailPhys:335,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1431,SelfWorkingSet:15984, SelfPageFile:13004
2026-04-29 21:30:36 [Info] CommitTotal:5237,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:335,SystemCache:213,KernelTotal:269,KernelPaged:176,KernelNonpaged:93,PageSize:4096,HandleCount:27695,ProcessCount:52,ThreadCount:764
2026-04-29 21:36:07 [Info] nCurrentClock is 90006500, nCurrentTime is 1777469767
2026-04-29 21:36:07 [Info] SendMessage T_MSG_LOGIN
2026-04-29 21:36:07 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-04-29 21:36:07 [Info] begin to enable self guard after reconnect
2026-04-29 21:36:07 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-04-29 21:36:07 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-04-29 21:36:08 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-04-29 21:36:08 [Info] key : cpu, value : 10
2026-04-29 21:36:08 [Info] key : rio, value : 20480
2026-04-29 21:36:08 [Info] key : wio, value : 20480
2026-04-29 21:36:08 [Info] key : cpu_all, value : 0
2026-04-29 21:36:08 [Info] key : max_pid_check, value : 200
2026-04-29 21:36:08 [Info] key : throw_dump, value : 0
2026-04-29 21:36:08 [Info] key : hash_mode, value : 1
2026-04-29 21:36:08 [Info] key : mem, value : 200
2026-04-29 21:36:08 [Info] can not find key max_fd in online conf
2026-04-29 21:36:08 [Info] key : proc_limit, value : 1
2026-04-29 21:36:08 [Info] key : resource_limit_mode, value : 3
2026-04-29 21:36:08 [Info] key : rtap_update_mode, value : 1
2026-04-29 21:36:08 [Info] can not find key debug in online conf
2026-04-29 21:36:08 [Info] can not find key update_mode in online conf
2026-04-29 21:36:08 [Info] can not find key http_mode in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_enable in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_new_agent in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-04-29 21:36:08 [Info] can not find key mem_low_mark in online conf
2026-04-29 21:36:08 [Info] can not find key obnormal_report_interval in online conf
2026-04-29 21:36:08 [Info] key : cache_mode, value : 0
2026-04-29 21:36:08 [Info] key : abnormal_monitor_mode, value : 3
2026-04-29 21:36:08 [Info] can not find key rtap_low_mem_force_run in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_small_big_check_size in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_small_mem_limit in online conf
2026-04-29 21:36:08 [Info] can not find key rtap_big_mem_limit in online conf
2026-04-29 21:36:08 [Info] key : queue_size_ratio, value : 80
2026-04-29 21:36:08 [Info] queue_size_ratio is 80
2026-04-29 21:36:08 [Info] resource limit mode and max limit cpu is not change
2026-04-29 21:36:08 [Info] set hash mode 1
2026-04-29 21:36:08 [Info] RTAP timeout config:9600000
2026-04-29 21:36:08 [Info] self_guard_mode config is 0
2026-04-29 21:36:08 [Info] GetMessage : T_MSG_CHECK
2026-04-29 21:36:08 [Info] task 4dfa6529-43c7-4754-a6a9-94bec84548ce has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 21:36:13 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 21:36:13 [Info] ipc client:Rtap104151777469773_handler Reg client_name:Rtap104151777469773 on WhiteList
2026-04-29 21:36:13 [Info] start rtap process success, pid is 488, argument is Rtap104151777469773
2026-04-29 21:36:13 [Info] New ClientConnectNotify : Rtap104151777469773, id is 00000504
2026-04-29 21:36:13 [Info] ipc client:Rtap104151777469773 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 21:36:14 [Info] GetMessage : T_MSG_CHECK
2026-04-29 21:36:14 [Info] task 28c9960d32c66ba3deb6f1543990738e has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-04-29 21:36:14 [Info] Rtap Platform Rtap104151777469773 execv work --windows-sysinfoext-check on pid 488
2026-04-29 21:36:14 [Info] csrss.exe open proc 488 AliSecCheck.ex
2026-04-29 21:36:15 [Info] csrss.exe open thread 488 AliSecCheck.ex
2026-04-29 21:36:18 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-04-29 21:36:18 [Info] ipc client:Rtap104321777469778_handler Reg client_name:Rtap104321777469778 on WhiteList
2026-04-29 21:36:18 [Info] start rtap process success, pid is 2356, argument is Rtap104321777469778
2026-04-29 21:36:18 [Info] New ClientConnectNotify : Rtap104321777469778, id is 0000052C
2026-04-29 21:36:19 [Info] ipc client:Rtap104321777469778 UnReg client_name:protocol_ipc_client on WhiteList
2026-04-29 21:36:19 [Info] Rtap Platform Rtap104321777469778 execv work --windows-vul-check on pid 2356
2026-04-29 21:36:19 [Info] csrss.exe open proc 2356 AliSecCheck.ex
2026-04-29 21:36:20 [Info] csrss.exe open thread 2356 AliSecCheck.ex
2026-04-29 21:36:26 [Info] Done Work --windows-sysinfoext-check:1
2026-04-29 21:36:26 [Info] Rtap Platform Rtap104151777469773 Exit:normal exit
2026-04-29 21:36:28 [Info] ClientDisConnectNotify : Rtap104151777469773, id is 00000504
2026-04-29 21:36:32 [Info] Done Work --windows-vul-check:1
2026-04-29 21:36:32 [Info] Rtap Platform Rtap104321777469778 Exit:normal exit
2026-04-29 21:36:34 [Info] ClientDisConnectNotify : Rtap104321777469778, id is 0000052C
2026-04-29 22:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16028","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16116","aliyundun_upload_time":"1777471586","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 22:30:53 [Info] TotalPhys:2047,AvailPhys:333,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1428,SelfWorkingSet:16036, SelfPageFile:13224
2026-04-29 22:30:53 [Info] CommitTotal:5241,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:333,SystemCache:222,KernelTotal:268,KernelPaged:175,KernelNonpaged:92,PageSize:4096,HandleCount:27612,ProcessCount:52,ThreadCount:766
2026-04-29 23:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16025","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16116","aliyundun_upload_time":"1777475200","aliyundun_write_pid_times":"0","ipc_send_count":"139","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-04-29 23:31:10 [Info] TotalPhys:2047,AvailPhys:339,TotalVirtual:2047,AvailVirtual:1983,TotalPageFile:6669,AvailPageFile:1423,SelfWorkingSet:16008, SelfPageFile:13200
2026-04-29 23:31:10 [Info] CommitTotal:5245,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:339,SystemCache:226,KernelTotal:269,KernelPaged:176,KernelNonpaged:92,PageSize:4096,HandleCount:27597,ProcessCount:52,ThreadCount:761
2026-04-29 23:46:44 [Info] get meta data success by v2
2026-04-29 23:46:44 [Info] get empty metaserver config
2026-04-29 23:46:44 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 23:46:44 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-04-29 23:46:44 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-04-29 23:46:44 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-04-29 23:46:44 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-04-29 23:46:44 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-04-29 23:46:44 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 23:46:44 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-04-29 23:46:44 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-04-29 23:46:44 [Info] download cert compare md5 same
2026-04-29 23:46:44 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 23:46:44 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-04-29 23:46:44 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-04-30 00:06:22 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"15987","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16140","aliyundun_upload_time":"1777478782","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 00:24:26 [Info] TotalPhys:2047,AvailPhys:453,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1283,SelfWorkingSet:16492, SelfPageFile:13900
2026-05-06 00:24:26 [Info] CommitTotal:4806,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:453,SystemCache:345,KernelTotal:264,KernelPaged:178,KernelNonpaged:86,PageSize:4096,HandleCount:27802,ProcessCount:52,ThreadCount:766
2026-05-06 00:57:24 [Info] nCurrentClock is 576035100, nCurrentTime is 1778000244
2026-05-06 00:57:24 [Info] SendMessage T_MSG_LOGIN
2026-05-06 00:57:25 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-06 00:57:25 [Info] begin to enable self guard after reconnect
2026-05-06 00:57:25 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-06 00:57:25 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-06 00:57:25 [Info] GetMessage : T_MSG_CHECK
2026-05-06 00:57:25 [Info] task 78066c08-8461-43ec-95e5-2d8435a51314 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 00:57:27 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-06 00:57:27 [Info] key : cpu, value : 10
2026-05-06 00:57:27 [Info] key : rio, value : 20480
2026-05-06 00:57:27 [Info] key : wio, value : 20480
2026-05-06 00:57:27 [Info] key : cpu_all, value : 0
2026-05-06 00:57:27 [Info] key : max_pid_check, value : 200
2026-05-06 00:57:27 [Info] key : throw_dump, value : 0
2026-05-06 00:57:27 [Info] key : hash_mode, value : 1
2026-05-06 00:57:27 [Info] key : mem, value : 200
2026-05-06 00:57:27 [Info] can not find key max_fd in online conf
2026-05-06 00:57:27 [Info] key : proc_limit, value : 1
2026-05-06 00:57:27 [Info] key : resource_limit_mode, value : 3
2026-05-06 00:57:27 [Info] key : rtap_update_mode, value : 1
2026-05-06 00:57:27 [Info] can not find key debug in online conf
2026-05-06 00:57:27 [Info] can not find key update_mode in online conf
2026-05-06 00:57:27 [Info] can not find key http_mode in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_enable in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_new_agent in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-06 00:57:27 [Info] can not find key mem_low_mark in online conf
2026-05-06 00:57:27 [Info] can not find key obnormal_report_interval in online conf
2026-05-06 00:57:27 [Info] key : cache_mode, value : 0
2026-05-06 00:57:27 [Info] key : abnormal_monitor_mode, value : 3
2026-05-06 00:57:27 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-06 00:57:27 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-06 00:57:27 [Info] key : queue_size_ratio, value : 80
2026-05-06 00:57:27 [Info] queue_size_ratio is 80
2026-05-06 00:57:27 [Info] resource limit mode and max limit cpu is not change
2026-05-06 00:57:27 [Info] set hash mode 1
2026-05-06 00:57:27 [Info] RTAP timeout config:9600000
2026-05-06 00:57:27 [Info] self_guard_mode config is 0
2026-05-06 00:57:32 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 00:57:32 [Info] ipc client:Rtap60331778000252_handler Reg client_name:Rtap60331778000252 on WhiteList
2026-05-06 00:57:32 [Info] start rtap process success, pid is 2020, argument is Rtap60331778000252
2026-05-06 00:57:32 [Info] system memory usage is 82
2026-05-06 00:57:33 [Info] system memory usage is 82
2026-05-06 00:57:33 [Info] New ClientConnectNotify : Rtap60331778000252, id is 000004DC
2026-05-06 00:57:33 [Info] ipc client:Rtap60331778000252 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 00:57:33 [Info] Rtap Platform Rtap60331778000252 execv work --windows-sysinfoext-check on pid 2020
2026-05-06 00:57:34 [Info] csrss.exe open proc 2020 AliSecCheck.ex
2026-05-06 00:57:35 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 00:57:36 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 00:57:37 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 00:57:38 [Info] csrss.exe open thread 2020 AliSecCheck.ex
2026-05-06 00:57:44 [Info] Done Work --windows-sysinfoext-check:1
2026-05-06 00:57:44 [Info] Rtap Platform Rtap60331778000252 Exit:normal exit
2026-05-06 00:57:47 [Info] ClientDisConnectNotify : Rtap60331778000252, id is 000004DC
2026-05-06 01:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16485","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16656","aliyundun_upload_time":"1778000786","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"78","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 01:24:45 [Info] TotalPhys:2047,AvailPhys:428,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1266,SelfWorkingSet:16364, SelfPageFile:13536
2026-05-06 01:24:45 [Info] CommitTotal:4822,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:428,SystemCache:384,KernelTotal:258,KernelPaged:171,KernelNonpaged:86,PageSize:4096,HandleCount:28245,ProcessCount:53,ThreadCount:800
2026-05-06 01:43:39 [Info] GetMessage : T_MSG_CHECK
2026-05-06 01:43:39 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMDMwMTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDQ2MjE5LCJzdWIiOiJSVEFQX0lEWF8xODA4OTVfMTc3ODAwMzAxOTY0MSJ9.TliyNZ3BqaHCMdleLmnU7ur-VttgYQ2aUwYZmDhsv9I has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 01:43:46 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 01:43:46 [Info] ipc client:Rtap150911778003026_handler Reg client_name:Rtap150911778003026 on WhiteList
2026-05-06 01:43:46 [Info] start rtap process success, pid is 2472, argument is Rtap150911778003026
2026-05-06 01:43:47 [Info] New ClientConnectNotify : Rtap150911778003026, id is 00000504
2026-05-06 01:43:48 [Info] Rtap Platform Rtap150911778003026 execv work --sca on pid 2472
2026-05-06 01:43:48 [Info] ipc client:Rtap150911778003026 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 01:43:49 [Info] csrss.exe open proc 2472 AliSecCheck.ex
2026-05-06 01:43:50 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:43:51 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:43:52 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:43:53 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:44:13 [Info] csrss.exe open thread 2472 AliSecCheck.ex
2026-05-06 01:44:35 [Info] Done Work --sca:1
2026-05-06 01:44:35 [Info] Rtap Platform Rtap150911778003026 Exit:normal exit
2026-05-06 01:44:37 [Info] ClientDisConnectNotify : Rtap150911778003026, id is 00000504
2026-05-06 02:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16464","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16684","aliyundun_upload_time":"1778004398","aliyundun_write_pid_times":"0","ipc_send_count":"144","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 02:25:01 [Info] TotalPhys:2047,AvailPhys:411,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1211,SelfWorkingSet:16516, SelfPageFile:13728
2026-05-06 02:25:01 [Info] CommitTotal:4878,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:411,SystemCache:337,KernelTotal:259,KernelPaged:172,KernelNonpaged:86,PageSize:4096,HandleCount:27844,ProcessCount:52,ThreadCount:766
2026-05-06 03:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16483","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16552","aliyundun_upload_time":"1778007992","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"82","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 03:07:40 [Info] get meta data success by v2
2026-05-06 03:07:40 [Info] get empty metaserver config
2026-05-06 03:07:40 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 03:07:40 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 03:07:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 03:07:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 03:07:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 03:07:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 03:07:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 03:07:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 03:07:41 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 03:07:41 [Info] download cert compare md5 same
2026-05-06 03:07:41 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 03:07:41 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 03:07:41 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 03:25:19 [Info] TotalPhys:2047,AvailPhys:418,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1151,SelfWorkingSet:16456, SelfPageFile:13652
2026-05-06 03:25:19 [Info] CommitTotal:4937,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:418,SystemCache:340,KernelTotal:257,KernelPaged:170,KernelNonpaged:86,PageSize:4096,HandleCount:27888,ProcessCount:52,ThreadCount:784
2026-05-06 04:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16510","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16600","aliyundun_upload_time":"1778011570","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 04:25:35 [Info] TotalPhys:2047,AvailPhys:426,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1136,SelfWorkingSet:16540, SelfPageFile:13736
2026-05-06 04:25:35 [Info] CommitTotal:4953,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:426,SystemCache:264,KernelTotal:257,KernelPaged:171,KernelNonpaged:86,PageSize:4096,HandleCount:27818,ProcessCount:52,ThreadCount:765
2026-05-06 05:06:32 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16552","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16612","aliyundun_upload_time":"1778015192","aliyundun_write_pid_times":"0","ipc_send_count":"140","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 05:25:55 [Info] TotalPhys:2047,AvailPhys:427,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1121,SelfWorkingSet:16596, SelfPageFile:13820
2026-05-06 05:25:55 [Info] CommitTotal:4968,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:427,SystemCache:350,KernelTotal:257,KernelPaged:170,KernelNonpaged:86,PageSize:4096,HandleCount:27902,ProcessCount:52,ThreadCount:772
2026-05-06 06:06:18 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16556","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16596","aliyundun_upload_time":"1778018778","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"77","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 06:22:50 [Info] get meta data success by v2
2026-05-06 06:22:50 [Info] get empty metaserver config
2026-05-06 06:22:50 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 06:22:50 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 06:22:50 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 06:22:50 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 06:22:50 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 06:22:50 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 06:22:50 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 06:22:50 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 06:22:51 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 06:22:51 [Info] download cert compare md5 same
2026-05-06 06:22:51 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 06:22:51 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 06:22:51 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 06:22:51 [Info] nCurrentClock is 594035900, nCurrentTime is 1778019771
2026-05-06 06:22:51 [Info] SendMessage T_MSG_LOGIN
2026-05-06 06:22:51 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-06 06:22:51 [Info] begin to enable self guard after reconnect
2026-05-06 06:22:51 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-06 06:22:51 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-06 06:22:51 [Info] GetMessage : T_MSG_CHECK
2026-05-06 06:22:51 [Info] task 988b7687-846d-43e5-b630-429750df657d has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 06:22:53 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-06 06:22:54 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-06 06:22:54 [Info] key : cpu, value : 10
2026-05-06 06:22:54 [Info] key : rio, value : 20480
2026-05-06 06:22:54 [Info] key : wio, value : 20480
2026-05-06 06:22:54 [Info] key : cpu_all, value : 0
2026-05-06 06:22:54 [Info] key : max_pid_check, value : 200
2026-05-06 06:22:54 [Info] key : throw_dump, value : 0
2026-05-06 06:22:54 [Info] key : hash_mode, value : 1
2026-05-06 06:22:54 [Info] key : mem, value : 200
2026-05-06 06:22:54 [Info] can not find key max_fd in online conf
2026-05-06 06:22:54 [Info] key : proc_limit, value : 1
2026-05-06 06:22:54 [Info] key : resource_limit_mode, value : 3
2026-05-06 06:22:54 [Info] key : rtap_update_mode, value : 1
2026-05-06 06:22:54 [Info] can not find key debug in online conf
2026-05-06 06:22:54 [Info] can not find key update_mode in online conf
2026-05-06 06:22:54 [Info] can not find key http_mode in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_enable in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_new_agent in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-06 06:22:54 [Info] can not find key mem_low_mark in online conf
2026-05-06 06:22:54 [Info] can not find key obnormal_report_interval in online conf
2026-05-06 06:22:54 [Info] key : cache_mode, value : 0
2026-05-06 06:22:54 [Info] key : abnormal_monitor_mode, value : 3
2026-05-06 06:22:54 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-06 06:22:54 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-06 06:22:54 [Info] key : queue_size_ratio, value : 80
2026-05-06 06:22:54 [Info] queue_size_ratio is 80
2026-05-06 06:22:54 [Info] resource limit mode and max limit cpu is not change
2026-05-06 06:22:54 [Info] set hash mode 1
2026-05-06 06:22:54 [Info] RTAP timeout config:9600000
2026-05-06 06:22:54 [Info] self_guard_mode config is 0
2026-05-06 06:22:58 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 06:22:58 [Info] ipc client:Rtap42601778019778_handler Reg client_name:Rtap42601778019778 on WhiteList
2026-05-06 06:22:58 [Info] start rtap process success, pid is 3508, argument is Rtap42601778019778
2026-05-06 06:23:00 [Info] New ClientConnectNotify : Rtap42601778019778, id is 000004B4
2026-05-06 06:23:00 [Info] ipc client:Rtap42601778019778 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 06:23:00 [Info] Rtap Platform Rtap42601778019778 execv work --windows-sysinfoext-check on pid 3508
2026-05-06 06:23:00 [Info] csrss.exe open proc 3508 AliSecCheck.ex
2026-05-06 06:23:01 [Info] csrss.exe open thread 3508 AliSecCheck.ex
2026-05-06 06:23:02 [Info] csrss.exe open thread 3508 AliSecCheck.ex
2026-05-06 06:23:03 [Info] csrss.exe open thread 3508 AliSecCheck.ex
2026-05-06 06:23:04 [Info] csrss.exe open thread 3508 AliSecCheck.ex
2026-05-06 06:23:11 [Info] Done Work --windows-sysinfoext-check:1
2026-05-06 06:23:11 [Info] Rtap Platform Rtap42601778019778 Exit:normal exit
2026-05-06 06:23:13 [Info] ClientDisConnectNotify : Rtap42601778019778, id is 000004B4
2026-05-06 06:26:14 [Info] TotalPhys:2047,AvailPhys:412,TotalVirtual:2047,AvailVirtual:1977,TotalPageFile:6089,AvailPageFile:1141,SelfWorkingSet:16588, SelfPageFile:14012
2026-05-06 06:26:14 [Info] CommitTotal:4948,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:412,SystemCache:366,KernelTotal:263,KernelPaged:176,KernelNonpaged:86,PageSize:4096,HandleCount:28156,ProcessCount:53,ThreadCount:801
2026-05-06 07:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16526","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16656","aliyundun_upload_time":"1778022381","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 07:26:34 [Info] TotalPhys:2047,AvailPhys:437,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1141,SelfWorkingSet:16540, SelfPageFile:13744
2026-05-06 07:26:34 [Info] CommitTotal:4948,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:437,SystemCache:393,KernelTotal:264,KernelPaged:177,KernelNonpaged:86,PageSize:4096,HandleCount:28141,ProcessCount:53,ThreadCount:786
2026-05-06 07:43:56 [Info] GetMessage : T_MSG_CHECK
2026-05-06 07:43:56 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMjQ2MzYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3MzM0MDg2LCJleHAiOjE3NzgwNjc4MzYsInN1YiI6IlJUQVBfSURYXzE4MDg5N18xNzc4MDI0NjM2Mjc3In0.7NbesBioEJeUv-1cg8cSvftOCCIe96gfQ-oKWFNVqA8 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 07:44:02 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 07:44:02 [Info] ipc client:Rtap201441778024642_handler Reg client_name:Rtap201441778024642 on WhiteList
2026-05-06 07:44:02 [Info] start rtap process success, pid is 2336, argument is Rtap201441778024642
2026-05-06 07:44:03 [Info] New ClientConnectNotify : Rtap201441778024642, id is 00000504
2026-05-06 07:44:04 [Info] csrss.exe open proc 2336 AliSecCheck.ex
2026-05-06 07:44:04 [Info] Rtap Platform Rtap201441778024642 execv work --windows-vul-clean on pid 2336
2026-05-06 07:44:04 [Info] ipc client:Rtap201441778024642 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 07:44:05 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 07:44:06 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 07:44:07 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 07:44:08 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 07:44:11 [Info] Done Work --windows-vul-clean:1
2026-05-06 07:44:11 [Info] Rtap Platform Rtap201441778024642 Exit:normal exit
2026-05-06 07:44:13 [Info] ClientDisConnectNotify : Rtap201441778024642, id is 00000504
2026-05-06 08:06:17 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16478","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16540","aliyundun_upload_time":"1778025977","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"76","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 08:27:00 [Info] TotalPhys:2047,AvailPhys:558,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1188,SelfWorkingSet:16428, SelfPageFile:13680
2026-05-06 08:27:00 [Info] CommitTotal:4901,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:558,SystemCache:455,KernelTotal:260,KernelPaged:173,KernelNonpaged:86,PageSize:4096,HandleCount:27862,ProcessCount:52,ThreadCount:766
2026-05-06 08:42:24 [Info] GetMessage : T_MSG_CHECK
2026-05-06 08:42:24 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMjgxNDQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDcxMzQ0LCJzdWIiOiJSVEFQX0lEWF8xODA4ODZfMTc3ODAyODE0NDU0MyJ9.NrAing8QTp_KDxuFpTcML-qjg49n0NCgD-T3uL-wyBw has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 08:42:31 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 08:42:31 [Info] ipc client:Rtap316031778028151_handler Reg client_name:Rtap316031778028151 on WhiteList
2026-05-06 08:42:31 [Info] start rtap process success, pid is 5068, argument is Rtap316031778028151
2026-05-06 08:42:32 [Info] New ClientConnectNotify : Rtap316031778028151, id is 0000052C
2026-05-06 08:42:33 [Info] Rtap Platform Rtap316031778028151 execv work --windows-process-check on pid 5068
2026-05-06 08:42:33 [Info] csrss.exe open proc 5068 AliSecCheck.ex
2026-05-06 08:42:33 [Info] ipc client:Rtap316031778028151 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 08:42:34 [Info] csrss.exe open thread 5068 AliSecCheck.ex
2026-05-06 08:42:35 [Info] csrss.exe open thread 5068 AliSecCheck.ex
2026-05-06 08:42:36 [Info] csrss.exe open thread 5068 AliSecCheck.ex
2026-05-06 08:42:37 [Info] csrss.exe open thread 5068 AliSecCheck.ex
2026-05-06 08:43:00 [Info] Done Work --windows-process-check:1
2026-05-06 08:43:00 [Info] Rtap Platform Rtap316031778028151 Exit:normal exit
2026-05-06 08:43:02 [Info] ClientDisConnectNotify : Rtap316031778028151, id is 0000052C
2026-05-06 09:06:26 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16528","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16768","aliyundun_upload_time":"1778029586","aliyundun_write_pid_times":"0","ipc_send_count":"143","login_time":"0","mem_usage":"74","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 09:27:17 [Info] TotalPhys:2047,AvailPhys:482,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1168,SelfWorkingSet:16592, SelfPageFile:13784
2026-05-06 09:27:17 [Info] CommitTotal:4920,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:482,SystemCache:314,KernelTotal:266,KernelPaged:179,KernelNonpaged:87,PageSize:4096,HandleCount:27936,ProcessCount:52,ThreadCount:778
2026-05-06 09:38:21 [Info] get meta data success by v2
2026-05-06 09:38:21 [Info] get empty metaserver config
2026-05-06 09:38:21 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 09:38:21 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-06 09:38:21 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-06 09:38:22 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-06 09:38:22 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-06 09:38:22 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-06 09:38:22 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 09:38:22 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-06 09:38:22 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-06 09:38:22 [Info] download cert compare md5 same
2026-05-06 09:38:22 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 09:38:22 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-06 09:38:22 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-06 10:06:29 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"3","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16586","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16672","aliyundun_upload_time":"1778033189","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-05-06 10:24:26 [Info] GetMessage : T_MSG_CHECK
2026-05-06 10:24:26 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzQyNjYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDc3NDY2LCJzdWIiOiJSVEFQX0lEWF8xODA4ODlfMTc3ODAzNDI2NjY2MyJ9.SaWT9GFx1KWlkCwA0KlmwFNRMB7OEaxhcjwKVOsvkHg has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 10:24:29 [Info] GetMessage : T_MSG_CHECK
2026-05-06 10:24:29 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzQyNjcsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDc3NDY3LCJleHAiOjE3NzczMzUwOTgsInN1YiI6IlJUQVBfSURYX3pLbFpsXzE3NzcyOTE4OTg4MDRfMjA1ZjVkOTM2ODYzODk1M2JhYzFlZTg0ZWI0MjVmZDUiLCJzdWIiOiJSVEFQX0lEWF96S2xabF8xNzc3MjkxODk4ODUyX2YwYTljZDQxMjE1NzQwODNmMDU2ZGZhOWVjMmIxZTI4Iiwic3ViIjoiUlRBUF9JRFhfMTgwODk0XzE3NzgwMzQyNjcxMzEifQ.P98JVEDtgxv4nK_h_Vv2d9iOr69WmzLWkhMbIChLfPk has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 10:24:31 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 10:24:31 [Info] ipc client:Rtap188201778034271_handler Reg client_name:Rtap188201778034271 on WhiteList
2026-05-06 10:24:32 [Info] start rtap process success, pid is 3640, argument is Rtap188201778034271
2026-05-06 10:24:33 [Info] New ClientConnectNotify : Rtap188201778034271, id is 00000504
2026-05-06 10:24:33 [Info] Rtap Platform Rtap188201778034271 execv work --windows-schedule-task-check on pid 3640
2026-05-06 10:24:33 [Info] ipc client:Rtap188201778034271 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 10:24:34 [Info] csrss.exe open proc 3640 AliSecCheck.ex
2026-05-06 10:24:35 [Info] csrss.exe open thread 3640 AliSecCheck.ex
2026-05-06 10:24:36 [Info] csrss.exe open thread 3640 AliSecCheck.ex
2026-05-06 10:24:38 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 10:24:38 [Info] ipc client:Rtap188431778034278_handler Reg client_name:Rtap188431778034278 on WhiteList
2026-05-06 10:24:38 [Info] start rtap process success, pid is 4500, argument is Rtap188431778034278
2026-05-06 10:24:38 [Info] New ClientConnectNotify : Rtap188431778034278, id is 00000540
2026-05-06 10:24:38 [Info] Rtap Platform Rtap188431778034278 execv work --windows-registry-check on pid 4500
2026-05-06 10:24:39 [Info] ipc client:Rtap188431778034278 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 10:24:40 [Info] csrss.exe open proc 4500 AliSecCheck.ex
2026-05-06 10:24:41 [Info] csrss.exe open thread 4500 AliSecCheck.ex
2026-05-06 10:25:30 [Info] Done Work --windows-registry-check:1
2026-05-06 10:25:30 [Info] Rtap Platform Rtap188431778034278 Exit:normal exit
2026-05-06 10:25:32 [Info] GetMessage : T_MSG_CHECK
2026-05-06 10:25:32 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzQzMzEsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDc3NTMxLCJzdWIiOiJSVEFQX0lEWF8xODA5MDBfMTc3ODAzNDMzMTk3NiJ9.JqdQh5LzcB3keG_LsUd_g2pkYLP_xLn7WOvTzljG_5E has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 10:25:32 [Info] ClientDisConnectNotify : Rtap188431778034278, id is 00000540
2026-05-06 10:25:37 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 10:25:37 [Info] ipc client:Rtap190361778034337_handler Reg client_name:Rtap190361778034337 on WhiteList
2026-05-06 10:25:38 [Info] start rtap process success, pid is 1056, argument is Rtap190361778034337
2026-05-06 10:25:38 [Info] New ClientConnectNotify : Rtap190361778034337, id is 0000052C
2026-05-06 10:25:38 [Info] ipc client:Rtap190361778034337 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 10:25:38 [Info] Rtap Platform Rtap190361778034337 execv work --windows-driver-version-check on pid 1056
2026-05-06 10:25:39 [Info] csrss.exe open proc 1056 AliSecCheck.ex
2026-05-06 10:25:40 [Info] csrss.exe open thread 1056 AliSecCheck.ex
2026-05-06 10:25:41 [Info] Done Work --windows-schedule-task-check:1
2026-05-06 10:25:41 [Info] Rtap Platform Rtap188201778034271 Exit:normal exit
2026-05-06 10:25:43 [Info] ClientDisConnectNotify : Rtap188201778034271, id is 00000504
2026-05-06 10:25:47 [Info] Done Work --windows-driver-version-check:1
2026-05-06 10:25:47 [Info] Rtap Platform Rtap190361778034337 Exit:normal exit
2026-05-06 10:25:49 [Info] ClientDisConnectNotify : Rtap190361778034337, id is 0000052C
2026-05-06 10:27:50 [Info] TotalPhys:2047,AvailPhys:483,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6089,AvailPageFile:1157,SelfWorkingSet:16448, SelfPageFile:13704
2026-05-06 10:27:50 [Info] CommitTotal:4932,CommitLimit:6089,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:483,SystemCache:420,KernelTotal:274,KernelPaged:185,KernelNonpaged:88,PageSize:4096,HandleCount:27987,ProcessCount:52,ThreadCount:787
2026-05-06 10:29:56 [Info] GetMessage : T_MSG_CHECK
2026-05-06 10:29:56 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzQ1OTYsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDc3Nzk2LCJzdWIiOiJSVEFQX0lEWF9XWVBnZl8xNzc3MjkxOTA1MjA0X2RhZDBjZGEwNmY1MTA2MGVlNDY4MTQ5ZjM1OTZiY2JmIiwic3ViIjoiUlRBUF9JRFhfMTgwODg3XzE3NzgwMzQ1OTY2OTMifQ.9rCNoH7C0wdow5tQr2iVjWrJLKNumqxB3kAYBpvAdss has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 10:30:02 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 10:30:02 [Info] ipc client:Rtap199011778034602_handler Reg client_name:Rtap199011778034602 on WhiteList
2026-05-06 10:30:02 [Info] start rtap process success, pid is 2336, argument is Rtap199011778034602
2026-05-06 10:30:02 [Info] New ClientConnectNotify : Rtap199011778034602, id is 000004B4
2026-05-06 10:30:02 [Info] ipc client:Rtap199011778034602 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 10:30:03 [Info] Rtap Platform Rtap199011778034602 execv work --tcp-connect-check on pid 2336
2026-05-06 10:30:03 [Info] csrss.exe open proc 2336 AliSecCheck.ex
2026-05-06 10:30:04 [Info] csrss.exe open thread 2336 AliSecCheck.ex
2026-05-06 10:30:14 [Info] Done Work --tcp-connect-check:1
2026-05-06 10:30:14 [Info] Rtap Platform Rtap199011778034602 Exit:normal exit
2026-05-06 10:30:16 [Info] ClientDisConnectNotify : Rtap199011778034602, id is 000004B4
2026-05-06 11:06:36 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"5","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"15177","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16600","aliyundun_upload_time":"1778036796","aliyundun_write_pid_times":"0","ipc_send_count":"153","login_time":"0","mem_usage":"75","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-06 11:10:59 [Info] GetMessage : T_MSG_CHECK
2026-05-06 11:10:59 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3NzgwMzcwNTksImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc4MDgwMjU5LCJzdWIiOiJSVEFQX0lEWF8xODA4OTFfMTc3ODAzNzA1OTcxNiJ9.X_TvEvCRfL3NCHwPle0mv1LDKpZ2Lo5nUCUGOqKtRMs has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-06 11:11:03 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-06 11:11:03 [Info] ipc client:Rtap279381778037063_handler Reg client_name:Rtap279381778037063 on WhiteList
2026-05-06 11:11:03 [Info] start rtap process success, pid is 3700, argument is Rtap279381778037063
2026-05-06 11:11:05 [Info] csrss.exe open proc 3700 AliSecCheck.ex
2026-05-06 11:11:06 [Info] csrss.exe open thread 3700 AliSecCheck.ex
2026-05-06 11:11:07 [Info] csrss.exe open thread 3700 AliSecCheck.ex
2026-05-06 11:11:08 [Info] csrss.exe open thread 3700 AliSecCheck.ex
2026-05-06 11:11:08 [Info] New ClientConnectNotify : Rtap279381778037063, id is 0000052C
2026-05-06 11:11:08 [Info] Rtap Platform Rtap279381778037063 execv work --windows-autorun-item-check on pid 3700
2026-05-06 11:11:09 [Info] ipc client:Rtap279381778037063 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-06 11:11:09 [Info] csrss.exe open thread 3700 AliSecCheck.ex
2026-05-06 11:11:36 [Info] Done Work --windows-autorun-item-check:1
2026-05-06 11:11:36 [Info] Rtap Platform Rtap279381778037063 Exit:normal exit
2026-05-06 11:11:38 [Info] ClientDisConnectNotify : Rtap279381778037063, id is 0000052C