2026-05-03 00:59:40 [Info] TotalPhys:2047,AvailPhys:418,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1395,SelfWorkingSet:16396, SelfPageFile:13648
2026-05-03 00:59:40 [Info] CommitTotal:5273,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:418,SystemCache:271,KernelTotal:261,KernelPaged:176,KernelNonpaged:85,PageSize:4096,HandleCount:27768,ProcessCount:52,ThreadCount:762
2026-05-03 01:06:28 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16454","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16616","aliyundun_upload_time":"1777741588","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 02:00:04 [Info] TotalPhys:2047,AvailPhys:434,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1411,SelfWorkingSet:16508, SelfPageFile:13676
2026-05-03 02:00:04 [Info] CommitTotal:5257,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:434,SystemCache:273,KernelTotal:260,KernelPaged:175,KernelNonpaged:84,PageSize:4096,HandleCount:27792,ProcessCount:52,ThreadCount:757
2026-05-03 02:01:12 [Info] GetMessage : T_MSG_CHECK
2026-05-03 02:01:12 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc3NDQ4NzIsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3Nzg4MDcyLCJzdWIiOiJSVEFQX0lEWF8xODA2NzBfMTc3Nzc0NDg3MjIyNyJ9.hWRwpEA-YZX7kfjrR-mex6CVdWvDxlM0dwkKrZDfDgk has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 02:01:17 [Info] run rtap work --sca with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 02:01:17 [Info] ipc client:Rtap240531777744877_handler Reg client_name:Rtap240531777744877 on WhiteList
2026-05-03 02:01:17 [Info] start rtap process success, pid is 3144, argument is Rtap240531777744877
2026-05-03 02:01:17 [Info] New ClientConnectNotify : Rtap240531777744877, id is 000004B4
2026-05-03 02:01:17 [Info] ipc client:Rtap240531777744877 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 02:01:18 [Info] Rtap Platform Rtap240531777744877 execv work --sca on pid 3144
2026-05-03 02:01:19 [Info] csrss.exe open proc 3144 AliSecCheck.ex
2026-05-03 02:01:20 [Info] csrss.exe open thread 3144 AliSecCheck.ex
2026-05-03 02:01:40 [Info] csrss.exe open thread 3144 AliSecCheck.ex
2026-05-03 02:02:01 [Info] Done Work --sca:1
2026-05-03 02:02:01 [Info] Rtap Platform Rtap240531777744877 Exit:normal exit
2026-05-03 02:02:03 [Info] ClientDisConnectNotify : Rtap240531777744877, id is 000004B4
2026-05-03 02:03:28 [Info] nCurrentClock is 342022200, nCurrentTime is 1777745008
2026-05-03 02:03:28 [Info] SendMessage T_MSG_LOGIN
2026-05-03 02:03:28 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-03 02:03:28 [Info] begin to enable self guard after reconnect
2026-05-03 02:03:28 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-03 02:03:28 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-03 02:03:28 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-03 02:03:28 [Info] key : cpu, value : 10
2026-05-03 02:03:28 [Info] key : rio, value : 20480
2026-05-03 02:03:28 [Info] key : wio, value : 20480
2026-05-03 02:03:28 [Info] key : cpu_all, value : 0
2026-05-03 02:03:28 [Info] key : max_pid_check, value : 200
2026-05-03 02:03:28 [Info] key : throw_dump, value : 0
2026-05-03 02:03:28 [Info] key : hash_mode, value : 1
2026-05-03 02:03:28 [Info] key : mem, value : 200
2026-05-03 02:03:28 [Info] can not find key max_fd in online conf
2026-05-03 02:03:28 [Info] key : proc_limit, value : 1
2026-05-03 02:03:28 [Info] key : resource_limit_mode, value : 3
2026-05-03 02:03:28 [Info] key : rtap_update_mode, value : 1
2026-05-03 02:03:28 [Info] can not find key debug in online conf
2026-05-03 02:03:28 [Info] can not find key update_mode in online conf
2026-05-03 02:03:28 [Info] can not find key http_mode in online conf
2026-05-03 02:03:28 [Info] can not find key rtap_enable in online conf
2026-05-03 02:03:28 [Info] can not find key rtap_new_agent in online conf
2026-05-03 02:03:28 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-03 02:03:28 [Info] can not find key mem_low_mark in online conf
2026-05-03 02:03:28 [Info] can not find key obnormal_report_interval in online conf
2026-05-03 02:03:28 [Info] key : cache_mode, value : 0
2026-05-03 02:03:28 [Info] key : abnormal_monitor_mode, value : 3
2026-05-03 02:03:28 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-03 02:03:28 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-03 02:03:28 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-03 02:03:28 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-03 02:03:28 [Info] key : queue_size_ratio, value : 80
2026-05-03 02:03:28 [Info] queue_size_ratio is 80
2026-05-03 02:03:28 [Info] resource limit mode and max limit cpu is not change
2026-05-03 02:03:28 [Info] set hash mode 1
2026-05-03 02:03:28 [Info] RTAP timeout config:9600000
2026-05-03 02:03:28 [Info] self_guard_mode config is 0
2026-05-03 02:03:28 [Info] GetMessage : T_MSG_CHECK
2026-05-03 02:03:28 [Info] task b8cc4193-39c4-480f-a710-84134ee45d93 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 02:03:33 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 02:03:33 [Info] ipc client:Rtap244971777745013_handler Reg client_name:Rtap244971777745013 on WhiteList
2026-05-03 02:03:34 [Info] start rtap process success, pid is 4868, argument is Rtap244971777745013
2026-05-03 02:03:34 [Info] New ClientConnectNotify : Rtap244971777745013, id is 00000524
2026-05-03 02:03:34 [Info] ipc client:Rtap244971777745013 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 02:03:34 [Info] Rtap Platform Rtap244971777745013 execv work --windows-sysinfoext-check on pid 4868
2026-05-03 02:03:35 [Info] csrss.exe open proc 4868 AliSecCheck.ex
2026-05-03 02:03:36 [Info] csrss.exe open thread 4868 AliSecCheck.ex
2026-05-03 02:03:41 [Info] Done Work --windows-sysinfoext-check:1
2026-05-03 02:03:41 [Info] Rtap Platform Rtap244971777745013 Exit:normal exit
2026-05-03 02:03:43 [Info] ClientDisConnectNotify : Rtap244971777745013, id is 00000524
2026-05-03 02:06:27 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16441","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16536","aliyundun_upload_time":"1777745187","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"80","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 03:00:29 [Info] TotalPhys:2047,AvailPhys:430,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1408,SelfWorkingSet:16224, SelfPageFile:13404
2026-05-03 03:00:29 [Info] CommitTotal:5260,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:430,SystemCache:307,KernelTotal:260,KernelPaged:175,KernelNonpaged:84,PageSize:4096,HandleCount:27790,ProcessCount:52,ThreadCount:772
2026-05-03 03:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16243","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16308","aliyundun_upload_time":"1777748785","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"79","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 03:09:05 [Info] get meta data success by v2
2026-05-03 03:09:05 [Info] get empty metaserver config
2026-05-03 03:09:05 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 03:09:05 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 03:09:05 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-03 03:09:05 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-03 03:09:05 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-03 03:09:05 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-03 03:09:05 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 03:09:05 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 03:09:05 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-03 03:09:05 [Info] download cert compare md5 same
2026-05-03 03:09:05 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 03:09:05 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 03:09:05 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-03 04:01:01 [Info] TotalPhys:2047,AvailPhys:368,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1404,SelfWorkingSet:16240, SelfPageFile:13448
2026-05-03 04:01:01 [Info] CommitTotal:5264,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:368,SystemCache:283,KernelTotal:262,KernelPaged:177,KernelNonpaged:85,PageSize:4096,HandleCount:27777,ProcessCount:52,ThreadCount:759
2026-05-03 04:06:30 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16258","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16376","aliyundun_upload_time":"1777752390","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"1","update_update_fail":"0"}
2026-05-03 05:01:26 [Info] TotalPhys:2047,AvailPhys:376,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1414,SelfWorkingSet:16260, SelfPageFile:13572
2026-05-03 05:01:26 [Info] CommitTotal:5254,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:376,SystemCache:281,KernelTotal:261,KernelPaged:176,KernelNonpaged:84,PageSize:4096,HandleCount:27760,ProcessCount:52,ThreadCount:758
2026-05-03 05:06:34 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16271","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16432","aliyundun_upload_time":"1777755994","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 06:01:51 [Info] TotalPhys:2047,AvailPhys:379,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1419,SelfWorkingSet:16336, SelfPageFile:13572
2026-05-03 06:01:51 [Info] CommitTotal:5249,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:379,SystemCache:275,KernelTotal:262,KernelPaged:177,KernelNonpaged:85,PageSize:4096,HandleCount:27674,ProcessCount:52,ThreadCount:762
2026-05-03 06:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16267","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16352","aliyundun_upload_time":"1777759585","aliyundun_write_pid_times":"0","ipc_send_count":"136","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 06:26:23 [Info] get meta data success by v2
2026-05-03 06:26:23 [Info] get empty metaserver config
2026-05-03 06:26:23 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 06:26:23 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 06:26:23 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-03 06:26:23 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-03 06:26:23 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-03 06:26:23 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-03 06:26:23 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 06:26:23 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 06:26:23 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-03 06:26:23 [Info] download cert compare md5 same
2026-05-03 06:26:23 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 06:26:23 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 06:26:23 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-03 07:02:15 [Info] TotalPhys:2047,AvailPhys:381,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1422,SelfWorkingSet:16316, SelfPageFile:13616
2026-05-03 07:02:15 [Info] CommitTotal:5247,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:381,SystemCache:281,KernelTotal:262,KernelPaged:177,KernelNonpaged:85,PageSize:4096,HandleCount:27675,ProcessCount:52,ThreadCount:761
2026-05-03 07:06:21 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16304","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16444","aliyundun_upload_time":"1777763181","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 07:32:00 [Info] nCurrentClock is 360023100, nCurrentTime is 1777764720
2026-05-03 07:32:00 [Info] SendMessage T_MSG_LOGIN
2026-05-03 07:32:00 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-03 07:32:00 [Info] begin to enable self guard after reconnect
2026-05-03 07:32:00 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-03 07:32:00 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-03 07:32:00 [Info] GetMessage : T_MSG_CHECK
2026-05-03 07:32:00 [Info] task d447e0d6-6f2a-4a32-8736-ef866ff11f02 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 07:32:02 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-03 07:32:02 [Info] key : cpu, value : 10
2026-05-03 07:32:02 [Info] key : rio, value : 20480
2026-05-03 07:32:02 [Info] key : wio, value : 20480
2026-05-03 07:32:02 [Info] key : cpu_all, value : 0
2026-05-03 07:32:02 [Info] key : max_pid_check, value : 200
2026-05-03 07:32:02 [Info] key : throw_dump, value : 0
2026-05-03 07:32:02 [Info] key : hash_mode, value : 1
2026-05-03 07:32:02 [Info] key : mem, value : 200
2026-05-03 07:32:02 [Info] can not find key max_fd in online conf
2026-05-03 07:32:02 [Info] key : proc_limit, value : 1
2026-05-03 07:32:02 [Info] key : resource_limit_mode, value : 3
2026-05-03 07:32:02 [Info] key : rtap_update_mode, value : 1
2026-05-03 07:32:02 [Info] can not find key debug in online conf
2026-05-03 07:32:02 [Info] can not find key update_mode in online conf
2026-05-03 07:32:02 [Info] can not find key http_mode in online conf
2026-05-03 07:32:02 [Info] can not find key rtap_enable in online conf
2026-05-03 07:32:02 [Info] can not find key rtap_new_agent in online conf
2026-05-03 07:32:02 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-03 07:32:02 [Info] can not find key mem_low_mark in online conf
2026-05-03 07:32:02 [Info] can not find key obnormal_report_interval in online conf
2026-05-03 07:32:02 [Info] key : cache_mode, value : 0
2026-05-03 07:32:02 [Info] key : abnormal_monitor_mode, value : 3
2026-05-03 07:32:02 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-03 07:32:02 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-03 07:32:02 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-03 07:32:02 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-03 07:32:02 [Info] key : queue_size_ratio, value : 80
2026-05-03 07:32:02 [Info] queue_size_ratio is 80
2026-05-03 07:32:02 [Info] resource limit mode and max limit cpu is not change
2026-05-03 07:32:02 [Info] set hash mode 1
2026-05-03 07:32:02 [Info] RTAP timeout config:9600000
2026-05-03 07:32:02 [Info] self_guard_mode config is 0
2026-05-03 07:32:04 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 07:32:04 [Info] ipc client:Rtap233291777764724_handler Reg client_name:Rtap233291777764724 on WhiteList
2026-05-03 07:32:04 [Info] start rtap process success, pid is 3960, argument is Rtap233291777764724
2026-05-03 07:32:04 [Info] New ClientConnectNotify : Rtap233291777764724, id is 000001E4
2026-05-03 07:32:05 [Info] Rtap Platform Rtap233291777764724 execv work --windows-sysinfoext-check on pid 3960
2026-05-03 07:32:05 [Info] ipc client:Rtap233291777764724 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 07:32:07 [Info] csrss.exe open proc 3960 AliSecCheck.ex
2026-05-03 07:32:08 [Info] csrss.exe open thread 3960 AliSecCheck.ex
2026-05-03 07:32:09 [Info] csrss.exe open thread 3960 AliSecCheck.ex
2026-05-03 07:32:12 [Info] Done Work --windows-sysinfoext-check:1
2026-05-03 07:32:12 [Info] Rtap Platform Rtap233291777764724 Exit:normal exit
2026-05-03 07:32:14 [Info] ClientDisConnectNotify : Rtap233291777764724, id is 000001E4
2026-05-03 07:43:43 [Info] GetMessage : T_MSG_CHECK
2026-05-03 07:43:43 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc3NjU0MjMsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODA4NjIzLCJleHAiOjE3NzczMzUwOTgsInN1YiI6IlJUQVBfSURYX3pLbFpsXzE3NzcyOTE4OTg4MDRfMjA1ZjVkOTM2ODYzODk1M2JhYzFlZTg0ZWI0MjVmZDUiLCJzdWIiOiJSVEFQX0lEWF96S2xabF8xNzc3MjkxODk4ODUyX2YwYTljZDQxMjE1NzQwODNmMDU2ZGZhOWVjMmIxZTI4Iiwic3ViIjoiUlRBUF9JRFhfMTgwNjcyXzE3Nzc3NjU0MjMwODUifQ.aMjXMzrbHQInkslTk88-qv6M6ZsLBonzzmJ4iD6gjLc has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 07:43:48 [Info] run rtap work --windows-vul-clean with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 07:43:48 [Info] ipc client:Rtap256281777765428_handler Reg client_name:Rtap256281777765428 on WhiteList
2026-05-03 07:43:48 [Info] start rtap process success, pid is 4976, argument is Rtap256281777765428
2026-05-03 07:43:48 [Info] New ClientConnectNotify : Rtap256281777765428, id is 000004B4
2026-05-03 07:43:48 [Info] ipc client:Rtap256281777765428 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 07:43:49 [Info] Rtap Platform Rtap256281777765428 execv work --windows-vul-clean on pid 4976
2026-05-03 07:43:50 [Info] csrss.exe open proc 4976 AliSecCheck.ex
2026-05-03 07:43:51 [Info] csrss.exe open thread 4976 AliSecCheck.ex
2026-05-03 07:43:56 [Info] Done Work --windows-vul-clean:1
2026-05-03 07:43:56 [Info] Rtap Platform Rtap256281777765428 Exit:normal exit
2026-05-03 07:43:58 [Info] ClientDisConnectNotify : Rtap256281777765428, id is 000004B4
2026-05-03 08:02:41 [Info] TotalPhys:2047,AvailPhys:374,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1415,SelfWorkingSet:16540, SelfPageFile:13712
2026-05-03 08:02:41 [Info] CommitTotal:5253,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:374,SystemCache:280,KernelTotal:261,KernelPaged:177,KernelNonpaged:84,PageSize:4096,HandleCount:27826,ProcessCount:53,ThreadCount:765
2026-05-03 08:06:25 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16415","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16552","aliyundun_upload_time":"1777766785","aliyundun_write_pid_times":"0","ipc_send_count":"150","login_time":"0","mem_usage":"81","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 08:42:34 [Info] GetMessage : T_MSG_CHECK
2026-05-03 08:42:34 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc3Njg5NTQsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODEyMTU0LCJzdWIiOiJSVEFQX0lEWF8xODA2NjFfMTc3Nzc2ODk1NDYxMSJ9.C0cG4VYJ2euiOTTeTTPrEiR1u-Wvii6apxT0MKNdNK0 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 08:42:37 [Info] run rtap work --windows-process-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 08:42:37 [Info] ipc client:Rtap43851777768957_handler Reg client_name:Rtap43851777768957 on WhiteList
2026-05-03 08:42:37 [Info] start rtap process success, pid is 4996, argument is Rtap43851777768957
2026-05-03 08:42:37 [Info] New ClientConnectNotify : Rtap43851777768957, id is 000001E4
2026-05-03 08:42:37 [Info] ipc client:Rtap43851777768957 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 08:42:38 [Info] Rtap Platform Rtap43851777768957 execv work --windows-process-check on pid 4996
2026-05-03 08:42:39 [Info] csrss.exe open proc 4996 AliSecCheck.ex
2026-05-03 08:42:40 [Info] csrss.exe open thread 4996 AliSecCheck.ex
2026-05-03 08:43:01 [Info] Done Work --windows-process-check:1
2026-05-03 08:43:01 [Info] Rtap Platform Rtap43851777768957 Exit:normal exit
2026-05-03 08:43:03 [Info] ClientDisConnectNotify : Rtap43851777768957, id is 000001E4
2026-05-03 09:03:07 [Info] TotalPhys:2047,AvailPhys:289,TotalVirtual:2047,AvailVirtual:1980,TotalPageFile:6669,AvailPageFile:1369,SelfWorkingSet:16476, SelfPageFile:13740
2026-05-03 09:03:07 [Info] CommitTotal:5300,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:289,SystemCache:215,KernelTotal:264,KernelPaged:178,KernelNonpaged:85,PageSize:4096,HandleCount:28617,ProcessCount:56,ThreadCount:826
2026-05-03 09:06:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16475","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16540","aliyundun_upload_time":"1777770393","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 09:42:35 [Info] get meta data success by v2
2026-05-03 09:42:35 [Info] get empty metaserver config
2026-05-03 09:42:35 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 09:42:35 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 09:42:35 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-03 09:42:35 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-03 09:42:35 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-03 09:42:35 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-03 09:42:35 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 09:42:35 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 09:42:35 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-03 09:42:35 [Info] download cert compare md5 same
2026-05-03 09:42:35 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 09:42:35 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 09:42:35 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-03 10:03:29 [Info] TotalPhys:2047,AvailPhys:344,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1413,SelfWorkingSet:16520, SelfPageFile:13796
2026-05-03 10:03:29 [Info] CommitTotal:5255,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:344,SystemCache:224,KernelTotal:264,KernelPaged:179,KernelNonpaged:84,PageSize:4096,HandleCount:27668,ProcessCount:52,ThreadCount:758
2026-05-03 10:06:20 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16509","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16588","aliyundun_upload_time":"1777773980","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 10:24:18 [Info] GetMessage : T_MSG_CHECK
2026-05-03 10:24:18 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc3NzUwNTgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODE4MjU4LCJzdWIiOiJSVEFQX0lEWF8xODA2NjlfMTc3Nzc3NTA1ODU4NSJ9.XONq4JgVr8gZugtM1wK3Aj7jzdGjyvZtNp9BhQmVzIM has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 10:24:24 [Info] run rtap work --windows-registry-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 10:24:24 [Info] ipc client:Rtap243271777775064_handler Reg client_name:Rtap243271777775064 on WhiteList
2026-05-03 10:24:24 [Info] start rtap process success, pid is 4456, argument is Rtap243271777775064
2026-05-03 10:24:24 [Info] New ClientConnectNotify : Rtap243271777775064, id is 00000548
2026-05-03 10:24:24 [Info] ipc client:Rtap243271777775064 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 10:24:24 [Info] Rtap Platform Rtap243271777775064 execv work --windows-registry-check on pid 4456
2026-05-03 10:24:25 [Info] GetMessage : T_MSG_CHECK
2026-05-03 10:24:25 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc3NzUwNjUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODE4MjY1LCJleHAiOjE3NzczMzQwODYsInN1YiI6IlJUQVBfSURYXzE4MDY2NF8xNzc3Nzc1MDY1MTQ1Iiwic3ViIjoiUlRBUF9JRFhfektsWmxfMTc3NzI5MDg4Njg0Ml85MjZlYjI1YTQ3YWE1MDYxYWJmMGFkMTc2YTEwNmEzYiJ9.TELfIaQ6aKOLMBDISSCMKwEccxvxlAYwDrD8fyHvZZk has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 10:24:26 [Info] csrss.exe open proc 4456 AliSecCheck.ex
2026-05-03 10:24:27 [Info] csrss.exe open thread 4456 AliSecCheck.ex
2026-05-03 10:24:29 [Info] run rtap work --windows-schedule-task-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 10:24:29 [Info] ipc client:Rtap243441777775069_handler Reg client_name:Rtap243441777775069 on WhiteList
2026-05-03 10:24:29 [Info] start rtap process success, pid is 1560, argument is Rtap243441777775069
2026-05-03 10:24:29 [Info] New ClientConnectNotify : Rtap243441777775069, id is 000004B4
2026-05-03 10:24:30 [Info] ipc client:Rtap243441777775069 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 10:24:30 [Info] Rtap Platform Rtap243441777775069 execv work --windows-schedule-task-check on pid 1560
2026-05-03 10:24:31 [Info] csrss.exe open proc 1560 AliSecCheck.ex
2026-05-03 10:24:32 [Info] csrss.exe open thread 1560 AliSecCheck.ex
2026-05-03 10:25:01 [Info] Done Work --windows-registry-check:1
2026-05-03 10:25:01 [Info] Rtap Platform Rtap243271777775064 Exit:normal exit
2026-05-03 10:25:03 [Info] ClientDisConnectNotify : Rtap243271777775064, id is 00000548
2026-05-03 10:25:07 [Info] Done Work --windows-schedule-task-check:1
2026-05-03 10:25:07 [Info] Rtap Platform Rtap243441777775069 Exit:normal exit
2026-05-03 10:25:08 [Info] GetMessage : T_MSG_CHECK
2026-05-03 10:25:08 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc3NzUxMDgsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODE4MzA4LCJzdWIiOiJSVEFQX0lEWF8xODA2NzVfMTc3Nzc3NTEwODI0MyJ9.k0iCCmi2zdV-V8m09QYEm-5RcHn_8kBqEUOA8c51gms has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 10:25:09 [Info] ClientDisConnectNotify : Rtap243441777775069, id is 000004B4
2026-05-03 10:25:11 [Info] run rtap work --windows-driver-version-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 10:25:11 [Info] ipc client:Rtap244811777775111_handler Reg client_name:Rtap244811777775111 on WhiteList
2026-05-03 10:25:11 [Info] start rtap process success, pid is 2604, argument is Rtap244811777775111
2026-05-03 10:25:11 [Info] New ClientConnectNotify : Rtap244811777775111, id is 000001E4
2026-05-03 10:25:11 [Info] ipc client:Rtap244811777775111 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 10:25:11 [Info] Rtap Platform Rtap244811777775111 execv work --windows-driver-version-check on pid 2604
2026-05-03 10:25:14 [Info] csrss.exe open proc 2604 AliSecCheck.ex
2026-05-03 10:25:15 [Info] csrss.exe open thread 2604 AliSecCheck.ex
2026-05-03 10:25:18 [Info] Done Work --windows-driver-version-check:1
2026-05-03 10:25:18 [Info] Rtap Platform Rtap244811777775111 Exit:normal exit
2026-05-03 10:25:21 [Info] ClientDisConnectNotify : Rtap244811777775111, id is 000001E4
2026-05-03 10:28:55 [Info] GetMessage : T_MSG_CHECK
2026-05-03 10:28:55 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc3NzUzMzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODE4NTM1LCJleHAiOjE3NzczMzQwODYsInN1YiI6IlJUQVBfSURYXzE4MDY2Ml8xNzc3Nzc1MzM1ODgyIiwic3ViIjoiUlRBUF9JRFhfektsWmxfMTc3NzI5MDg4Njg0Ml85MjZlYjI1YTQ3YWE1MDYxYWJmMGFkMTc2YTEwNmEzYiJ9.S5LVJAeoyQX00ZVnwkygbEwnbtQWI58iNAosQDQBd4Q has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 10:29:00 [Info] run rtap work --tcp-connect-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 10:29:00 [Info] ipc client:Rtap252291777775340_handler Reg client_name:Rtap252291777775340 on WhiteList
2026-05-03 10:29:00 [Info] start rtap process success, pid is 96, argument is Rtap252291777775340
2026-05-03 10:29:00 [Info] New ClientConnectNotify : Rtap252291777775340, id is 000004B4
2026-05-03 10:29:00 [Info] ipc client:Rtap252291777775340 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 10:29:00 [Info] Rtap Platform Rtap252291777775340 execv work --tcp-connect-check on pid 96
2026-05-03 10:29:02 [Info] csrss.exe open proc 96 AliSecCheck.ex
2026-05-03 10:29:03 [Info] csrss.exe open thread 96 AliSecCheck.ex
2026-05-03 10:29:11 [Info] Done Work --tcp-connect-check:1
2026-05-03 10:29:11 [Info] Rtap Platform Rtap252291777775340 Exit:normal exit
2026-05-03 10:29:14 [Info] ClientDisConnectNotify : Rtap252291777775340, id is 000004B4
2026-05-03 11:03:55 [Info] TotalPhys:2047,AvailPhys:344,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1413,SelfWorkingSet:16488, SelfPageFile:13796
2026-05-03 11:03:55 [Info] CommitTotal:5256,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:344,SystemCache:233,KernelTotal:264,KernelPaged:179,KernelNonpaged:85,PageSize:4096,HandleCount:27670,ProcessCount:52,ThreadCount:763
2026-05-03 11:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16468","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16540","aliyundun_upload_time":"1777777599","aliyundun_write_pid_times":"0","ipc_send_count":"152","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 11:10:40 [Info] GetMessage : T_MSG_CHECK
2026-05-03 11:10:40 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc3Nzc4NDAsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODIxMDQwLCJzdWIiOiJSVEFQX0lEWF8xODA2NjZfMTc3Nzc3Nzg0MDU3MiJ9.HIfqpa93xLx441GeOvpHPUzqC46Y6G5brBnynzxqL9A has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 11:10:45 [Info] run rtap work --windows-autorun-item-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 11:10:45 [Info] ipc client:Rtap6411777777845_handler Reg client_name:Rtap6411777777845 on WhiteList
2026-05-03 11:10:45 [Info] start rtap process success, pid is 3984, argument is Rtap6411777777845
2026-05-03 11:10:45 [Info] New ClientConnectNotify : Rtap6411777777845, id is 000001E4
2026-05-03 11:10:45 [Info] ipc client:Rtap6411777777845 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 11:10:46 [Info] Rtap Platform Rtap6411777777845 execv work --windows-autorun-item-check on pid 3984
2026-05-03 11:10:47 [Info] csrss.exe open proc 3984 AliSecCheck.ex
2026-05-03 11:10:48 [Info] csrss.exe open thread 3984 AliSecCheck.ex
2026-05-03 11:11:01 [Info] Done Work --windows-autorun-item-check:1
2026-05-03 11:11:01 [Info] Rtap Platform Rtap6411777777845 Exit:normal exit
2026-05-03 11:11:04 [Info] ClientDisConnectNotify : Rtap6411777777845, id is 000001E4
2026-05-03 12:04:21 [Info] TotalPhys:2047,AvailPhys:341,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1403,SelfWorkingSet:16448, SelfPageFile:13708
2026-05-03 12:04:21 [Info] CommitTotal:5265,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:341,SystemCache:140,KernelTotal:258,KernelPaged:173,KernelNonpaged:85,PageSize:4096,HandleCount:27702,ProcessCount:52,ThreadCount:767
2026-05-03 12:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16463","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16564","aliyundun_upload_time":"1777781170","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 12:59:41 [Info] get meta data success by v2
2026-05-03 12:59:41 [Info] get empty metaserver config
2026-05-03 12:59:41 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 12:59:42 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 12:59:42 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-03 12:59:42 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-03 12:59:42 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-03 12:59:42 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-03 12:59:42 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 12:59:42 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 12:59:42 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-03 12:59:42 [Info] download cert compare md5 same
2026-05-03 12:59:42 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 12:59:42 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 12:59:42 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-03 12:59:42 [Info] nCurrentClock is 378024100, nCurrentTime is 1777784382
2026-05-03 12:59:42 [Info] SendMessage T_MSG_LOGIN
2026-05-03 12:59:42 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-03 12:59:42 [Info] begin to enable self guard after reconnect
2026-05-03 12:59:42 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-03 12:59:42 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-03 12:59:43 [Info] GetMessage : T_MSG_RESET_PLUGIN_LAUNCH_COUNT
2026-05-03 12:59:43 [Info] GetMessage : T_MSG_CHECK
2026-05-03 12:59:43 [Info] task c5107cb8-2e44-4921-9a51-81014f4ea09f has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 12:59:45 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-03 12:59:45 [Info] key : cpu, value : 10
2026-05-03 12:59:45 [Info] key : rio, value : 20480
2026-05-03 12:59:45 [Info] key : wio, value : 20480
2026-05-03 12:59:45 [Info] key : cpu_all, value : 0
2026-05-03 12:59:45 [Info] key : max_pid_check, value : 200
2026-05-03 12:59:45 [Info] key : throw_dump, value : 0
2026-05-03 12:59:45 [Info] key : hash_mode, value : 1
2026-05-03 12:59:45 [Info] key : mem, value : 200
2026-05-03 12:59:45 [Info] can not find key max_fd in online conf
2026-05-03 12:59:45 [Info] key : proc_limit, value : 1
2026-05-03 12:59:45 [Info] key : resource_limit_mode, value : 3
2026-05-03 12:59:45 [Info] key : rtap_update_mode, value : 1
2026-05-03 12:59:45 [Info] can not find key debug in online conf
2026-05-03 12:59:45 [Info] can not find key update_mode in online conf
2026-05-03 12:59:45 [Info] can not find key http_mode in online conf
2026-05-03 12:59:45 [Info] can not find key rtap_enable in online conf
2026-05-03 12:59:45 [Info] can not find key rtap_new_agent in online conf
2026-05-03 12:59:45 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-03 12:59:45 [Info] can not find key mem_low_mark in online conf
2026-05-03 12:59:45 [Info] can not find key obnormal_report_interval in online conf
2026-05-03 12:59:45 [Info] key : cache_mode, value : 0
2026-05-03 12:59:45 [Info] key : abnormal_monitor_mode, value : 3
2026-05-03 12:59:45 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-03 12:59:45 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-03 12:59:45 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-03 12:59:45 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-03 12:59:45 [Info] key : queue_size_ratio, value : 80
2026-05-03 12:59:45 [Info] queue_size_ratio is 80
2026-05-03 12:59:45 [Info] resource limit mode and max limit cpu is not change
2026-05-03 12:59:45 [Info] set hash mode 1
2026-05-03 12:59:45 [Info] RTAP timeout config:9600000
2026-05-03 12:59:45 [Info] self_guard_mode config is 0
2026-05-03 12:59:48 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 12:59:48 [Info] ipc client:Rtap220081777784388_handler Reg client_name:Rtap220081777784388 on WhiteList
2026-05-03 12:59:48 [Info] start rtap process success, pid is 2660, argument is Rtap220081777784388
2026-05-03 12:59:48 [Info] New ClientConnectNotify : Rtap220081777784388, id is 000004B4
2026-05-03 12:59:48 [Info] ipc client:Rtap220081777784388 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 12:59:49 [Info] Rtap Platform Rtap220081777784388 execv work --windows-sysinfoext-check on pid 2660
2026-05-03 12:59:49 [Info] csrss.exe open proc 2660 AliSecCheck.ex
2026-05-03 12:59:50 [Info] csrss.exe open thread 2660 AliSecCheck.ex
2026-05-03 13:00:00 [Info] Done Work --windows-sysinfoext-check:1
2026-05-03 13:00:00 [Info] Rtap Platform Rtap220081777784388 Exit:normal exit
2026-05-03 13:00:02 [Info] ClientDisConnectNotify : Rtap220081777784388, id is 000004B4
2026-05-03 13:04:46 [Info] TotalPhys:2047,AvailPhys:317,TotalVirtual:2047,AvailVirtual:1979,TotalPageFile:6669,AvailPageFile:1403,SelfWorkingSet:16336, SelfPageFile:13572
2026-05-03 13:04:46 [Info] CommitTotal:5265,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:317,SystemCache:161,KernelTotal:258,KernelPaged:173,KernelNonpaged:84,PageSize:4096,HandleCount:27882,ProcessCount:53,ThreadCount:777
2026-05-03 13:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"2","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16454","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"7","aliyundun_max_mem":"16504","aliyundun_upload_time":"1777784797","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"85","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 14:05:11 [Info] TotalPhys:2047,AvailPhys:323,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1409,SelfWorkingSet:16300, SelfPageFile:13584
2026-05-03 14:05:11 [Info] CommitTotal:5259,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:323,SystemCache:180,KernelTotal:259,KernelPaged:174,KernelNonpaged:84,PageSize:4096,HandleCount:27682,ProcessCount:52,ThreadCount:759
2026-05-03 14:06:42 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16319","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16428","aliyundun_upload_time":"1777788402","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"84","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 15:05:36 [Info] TotalPhys:2047,AvailPhys:326,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:6669,AvailPageFile:1404,SelfWorkingSet:16292, SelfPageFile:13572
2026-05-03 15:05:36 [Info] CommitTotal:5264,CommitLimit:6669,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:326,SystemCache:175,KernelTotal:257,KernelPaged:172,KernelNonpaged:84,PageSize:4096,HandleCount:27421,ProcessCount:51,ThreadCount:758
2026-05-03 15:06:12 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"1","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16306","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16368","aliyundun_upload_time":"1777791972","aliyundun_write_pid_times":"0","ipc_send_count":"135","login_time":"0","mem_usage":"83","module_load_failed":"0","network_send_buff_size":"50","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 16:06:00 [Info] TotalPhys:2047,AvailPhys:692,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1307,SelfWorkingSet:16316, SelfPageFile:13592
2026-05-03 16:06:00 [Info] CommitTotal:4592,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:692,SystemCache:159,KernelTotal:258,KernelPaged:173,KernelNonpaged:85,PageSize:4096,HandleCount:27593,ProcessCount:52,ThreadCount:770
2026-05-03 16:06:10 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16298","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16400","aliyundun_upload_time":"1777795570","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"65","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 16:16:35 [Info] get meta data success by v2
2026-05-03 16:16:35 [Info] get empty metaserver config
2026-05-03 16:16:35 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 16:16:36 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 16:16:36 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-03 16:16:36 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-03 16:16:36 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-03 16:16:36 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-03 16:16:36 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 16:16:36 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 16:16:36 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-03 16:16:36 [Info] download cert compare md5 same
2026-05-03 16:16:36 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 16:16:36 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 16:16:36 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-03 17:06:25 [Info] TotalPhys:2047,AvailPhys:643,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1259,SelfWorkingSet:16208, SelfPageFile:13384
2026-05-03 17:06:25 [Info] CommitTotal:4640,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:643,SystemCache:174,KernelTotal:258,KernelPaged:173,KernelNonpaged:85,PageSize:4096,HandleCount:27618,ProcessCount:52,ThreadCount:758
2026-05-03 17:06:38 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16286","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16396","aliyundun_upload_time":"1777799198","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"68","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 18:02:15 [Info] GetMessage : T_MSG_CHECK
2026-05-03 18:02:15 [Info] task eyJhbGciOiJIUzI1NiJ9.eyJpYXQiOjE3Nzc4MDI1MzUsImlzcyI6IlJUQVAiLCJhdWQiOiJSVEFQIiwiZXhwIjoxNzc3ODQ1NzM1LCJzdWIiOiJSVEFQX0lEWF8xODA3MzFfMTc3NzgwMjUzNTM3NSJ9.HfEiXePpBnErfIZa6aF5Q4HLbzZXP5XNR9i4p48U2Hs has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 18:02:19 [Info] run rtap work --secnet_rasp_agent with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 18:02:19 [Info] ipc client:Rtap157451777802539_handler Reg client_name:Rtap157451777802539 on WhiteList
2026-05-03 18:02:19 [Info] start rtap process success, pid is 3136, argument is Rtap157451777802539
2026-05-03 18:02:20 [Info] New ClientConnectNotify : Rtap157451777802539, id is 000004C8
2026-05-03 18:02:20 [Info] ipc client:Rtap157451777802539 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 18:02:21 [Info] Rtap Platform Rtap157451777802539 execv work --secnet_rasp_agent on pid 3136
2026-05-03 18:02:22 [Info] csrss.exe open proc 3136 AliSecCheck.ex
2026-05-03 18:02:23 [Info] csrss.exe open thread 3136 AliSecCheck.ex
2026-05-03 18:02:24 [Info] csrss.exe open thread 3136 AliSecCheck.ex
2026-05-03 18:02:25 [Info] csrss.exe open thread 3136 AliSecCheck.ex
2026-05-03 18:02:26 [Info] csrss.exe open thread 3136 AliSecCheck.ex
2026-05-03 18:02:32 [Info] Done Work --secnet_rasp_agent:1
2026-05-03 18:02:32 [Info] Rtap Platform Rtap157451777802539 Exit:normal exit
2026-05-03 18:02:34 [Info] ClientDisConnectNotify : Rtap157451777802539, id is 000004C8
2026-05-03 18:06:28 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16193","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16312","aliyundun_upload_time":"1777802788","aliyundun_write_pid_times":"0","ipc_send_count":"141","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 18:06:49 [Info] TotalPhys:2047,AvailPhys:613,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1234,SelfWorkingSet:16328, SelfPageFile:13560
2026-05-03 18:06:49 [Info] CommitTotal:4665,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:613,SystemCache:207,KernelTotal:258,KernelPaged:173,KernelNonpaged:85,PageSize:4096,HandleCount:27593,ProcessCount:52,ThreadCount:767
2026-05-03 18:27:41 [Info] nCurrentClock is 396025300, nCurrentTime is 1777804061
2026-05-03 18:27:41 [Info] SendMessage T_MSG_LOGIN
2026-05-03 18:27:41 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-03 18:27:41 [Info] begin to enable self guard after reconnect
2026-05-03 18:27:42 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-03 18:27:42 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-03 18:27:42 [Info] GetMessage : T_MSG_CHECK
2026-05-03 18:27:42 [Info] task c123eba2-3202-40ff-9348-7157e1f9873e has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 18:27:44 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-03 18:27:44 [Info] key : cpu, value : 10
2026-05-03 18:27:44 [Info] key : rio, value : 20480
2026-05-03 18:27:44 [Info] key : wio, value : 20480
2026-05-03 18:27:44 [Info] key : cpu_all, value : 0
2026-05-03 18:27:44 [Info] key : max_pid_check, value : 200
2026-05-03 18:27:44 [Info] key : throw_dump, value : 0
2026-05-03 18:27:44 [Info] key : hash_mode, value : 1
2026-05-03 18:27:44 [Info] key : mem, value : 200
2026-05-03 18:27:44 [Info] can not find key max_fd in online conf
2026-05-03 18:27:44 [Info] key : proc_limit, value : 1
2026-05-03 18:27:44 [Info] key : resource_limit_mode, value : 3
2026-05-03 18:27:44 [Info] key : rtap_update_mode, value : 1
2026-05-03 18:27:44 [Info] can not find key debug in online conf
2026-05-03 18:27:44 [Info] can not find key update_mode in online conf
2026-05-03 18:27:44 [Info] can not find key http_mode in online conf
2026-05-03 18:27:44 [Info] can not find key rtap_enable in online conf
2026-05-03 18:27:44 [Info] can not find key rtap_new_agent in online conf
2026-05-03 18:27:44 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-03 18:27:44 [Info] can not find key mem_low_mark in online conf
2026-05-03 18:27:44 [Info] can not find key obnormal_report_interval in online conf
2026-05-03 18:27:44 [Info] key : cache_mode, value : 0
2026-05-03 18:27:44 [Info] key : abnormal_monitor_mode, value : 3
2026-05-03 18:27:44 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-03 18:27:44 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-03 18:27:44 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-03 18:27:44 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-03 18:27:44 [Info] key : queue_size_ratio, value : 80
2026-05-03 18:27:44 [Info] queue_size_ratio is 80
2026-05-03 18:27:44 [Info] resource limit mode and max limit cpu is not change
2026-05-03 18:27:44 [Info] set hash mode 1
2026-05-03 18:27:44 [Info] RTAP timeout config:9600000
2026-05-03 18:27:44 [Info] self_guard_mode config is 0
2026-05-03 18:27:47 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 18:27:47 [Info] ipc client:Rtap207351777804067_handler Reg client_name:Rtap207351777804067 on WhiteList
2026-05-03 18:27:47 [Info] start rtap process success, pid is 4296, argument is Rtap207351777804067
2026-05-03 18:27:48 [Info] New ClientConnectNotify : Rtap207351777804067, id is 00000524
2026-05-03 18:27:48 [Info] csrss.exe open proc 4296 AliSecCheck.ex
2026-05-03 18:27:48 [Info] ipc client:Rtap207351777804067 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 18:27:48 [Info] Rtap Platform Rtap207351777804067 execv work --windows-sysinfoext-check on pid 4296
2026-05-03 18:27:49 [Info] csrss.exe open thread 4296 AliSecCheck.ex
2026-05-03 18:27:51 [Info] GetMessage : T_MSG_CHECK
2026-05-03 18:27:51 [Info] task 963ef65b6de89629b0c24598a7f88a30 has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 18:27:57 [Info] run rtap work --windows-vul-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 18:27:57 [Info] ipc client:Rtap207681777804077_handler Reg client_name:Rtap207681777804077 on WhiteList
2026-05-03 18:27:57 [Info] start rtap process success, pid is 2828, argument is Rtap207681777804077
2026-05-03 18:27:57 [Info] New ClientConnectNotify : Rtap207681777804077, id is 000004C8
2026-05-03 18:27:57 [Info] Rtap Platform Rtap207681777804077 execv work --windows-vul-check on pid 2828
2026-05-03 18:27:57 [Info] ipc client:Rtap207681777804077 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 18:27:59 [Info] csrss.exe open proc 2828 AliSecCheck.ex
2026-05-03 18:28:00 [Info] csrss.exe open thread 2828 AliSecCheck.ex
2026-05-03 18:28:12 [Info] Done Work --windows-vul-check:1
2026-05-03 18:28:12 [Info] Rtap Platform Rtap207681777804077 Exit:normal exit
2026-05-03 18:28:15 [Info] ClientDisConnectNotify : Rtap207681777804077, id is 000004C8
2026-05-03 18:28:35 [Info] Done Work --windows-sysinfoext-check:1
2026-05-03 18:28:35 [Info] Rtap Platform Rtap207351777804067 Exit:normal exit
2026-05-03 18:28:37 [Info] ClientDisConnectNotify : Rtap207351777804067, id is 00000524
2026-05-03 19:06:33 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16446","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16548","aliyundun_upload_time":"1777806393","aliyundun_write_pid_times":"0","ipc_send_count":"148","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 19:07:15 [Info] TotalPhys:2047,AvailPhys:613,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1237,SelfWorkingSet:16548, SelfPageFile:13812
2026-05-03 19:07:15 [Info] CommitTotal:4663,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:613,SystemCache:225,KernelTotal:258,KernelPaged:173,KernelNonpaged:85,PageSize:4096,HandleCount:27751,ProcessCount:53,ThreadCount:763
2026-05-03 19:33:18 [Info] get meta data success by v2
2026-05-03 19:33:18 [Info] get empty metaserver config
2026-05-03 19:33:18 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 19:33:18 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 19:33:18 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-03 19:33:18 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-03 19:33:18 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-03 19:33:18 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-03 19:33:18 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 19:33:18 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 19:33:19 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-03 19:33:19 [Info] download cert compare md5 same
2026-05-03 19:33:19 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 19:33:19 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 19:33:19 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-03 20:06:37 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"326","aliyundun_avg_mem":"16513","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"3","aliyundun_max_mem":"16604","aliyundun_upload_time":"1777809997","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 20:07:40 [Info] TotalPhys:2047,AvailPhys:618,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1239,SelfWorkingSet:16452, SelfPageFile:13708
2026-05-03 20:07:40 [Info] CommitTotal:4660,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:618,SystemCache:237,KernelTotal:259,KernelPaged:174,KernelNonpaged:84,PageSize:4096,HandleCount:27559,ProcessCount:52,ThreadCount:759
2026-05-03 21:06:15 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16457","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16492","aliyundun_upload_time":"1777813575","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"69","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 21:08:04 [Info] TotalPhys:2047,AvailPhys:614,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1237,SelfWorkingSet:16452, SelfPageFile:13712
2026-05-03 21:08:04 [Info] CommitTotal:4663,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:614,SystemCache:250,KernelTotal:259,KernelPaged:174,KernelNonpaged:85,PageSize:4096,HandleCount:27579,ProcessCount:52,ThreadCount:757
2026-05-03 22:06:16 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16434","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16464","aliyundun_upload_time":"1777817176","aliyundun_write_pid_times":"0","ipc_send_count":"138","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 22:08:29 [Info] TotalPhys:2047,AvailPhys:618,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1241,SelfWorkingSet:16440, SelfPageFile:13700
2026-05-03 22:08:29 [Info] CommitTotal:4659,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:618,SystemCache:259,KernelTotal:259,KernelPaged:174,KernelNonpaged:85,PageSize:4096,HandleCount:27565,ProcessCount:52,ThreadCount:760
2026-05-03 22:49:40 [Info] get meta data success by v2
2026-05-03 22:49:40 [Info] get empty metaserver config
2026-05-03 22:49:40 [Info] start DownLoadNakedBuffer aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 22:49:40 [Info] DownLoadNakedBuffer ok aegis.alicdn.com/download/conf/aegisMetaInfo.cfg
2026-05-03 22:49:40 [Info] start post buffer update2.aegis.aliyun.com/uuidRequest
2026-05-03 22:49:40 [Info] http request success : https://update2.aegis.aliyun.com/uuidRequest, http code : 200, curl ret : 0
2026-05-03 22:49:40 [Info] http request ret : {"result":{"uuid":"1df4a29c-9101-49c6-94e9-348f286d57d0"},"code":1}
2026-05-03 22:49:40 [Info] Currentuid Ret : 1df4a29c-9101-49c6-94e9-348f286d57d0
2026-05-03 22:49:40 [Info] start DownLoadBuffer update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 22:49:40 [Info] start do http get request for update.aegis.aliyun.com/download/cert/root.md5
2026-05-03 22:49:40 [Info] http request success : https://aegis.alicdn.com/download/cert/root.md5, http code : 200, curl ret : 0
2026-05-03 22:49:40 [Info] download cert compare md5 same
2026-05-03 22:49:40 [Info] strBufferMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 22:49:40 [Info] strRemotMd5 : 0e72a5897c51933bcd02c71a4c11732a
2026-05-03 22:49:40 [Info] cert file in C:/Program Files (x86)/Alibaba/Aegis/globalcfg/aegis.crt not need sync
2026-05-03 23:06:40 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16455","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"4","aliyundun_max_mem":"16544","aliyundun_upload_time":"1777820800","aliyundun_write_pid_times":"0","ipc_send_count":"137","login_time":"0","mem_usage":"70","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-03 23:08:53 [Info] TotalPhys:2047,AvailPhys:593,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1235,SelfWorkingSet:16452, SelfPageFile:13736
2026-05-03 23:08:53 [Info] CommitTotal:4665,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:593,SystemCache:293,KernelTotal:259,KernelPaged:174,KernelNonpaged:85,PageSize:4096,HandleCount:27845,ProcessCount:53,ThreadCount:786
2026-05-03 23:55:18 [Info] nCurrentClock is 414026300, nCurrentTime is 1777823718
2026-05-03 23:55:18 [Info] SendMessage T_MSG_LOGIN
2026-05-03 23:55:18 [Info] GetMessage : T_MSG_LOGIN_RSP
2026-05-03 23:55:18 [Info] begin to enable self guard after reconnect
2026-05-03 23:55:18 [Info] GetMessage : T_MSG_MACHINE_INFO
2026-05-03 23:55:18 [Info] GetMessage : T_MSG_PUSH_FILE_CONF
2026-05-03 23:55:19 [Info] GetMessage : T_MSG_CHECK
2026-05-03 23:55:19 [Info] task b8c46ce4-48e0-434e-8193-56d35d522bbd has 1 items, priority is 1, aggregate is 0, is restore task 0
2026-05-03 23:55:21 [Info] GetMessage : T_MSG_PUSH_CLIENT_CONF
2026-05-03 23:55:21 [Info] key : cpu, value : 10
2026-05-03 23:55:21 [Info] key : rio, value : 20480
2026-05-03 23:55:21 [Info] key : wio, value : 20480
2026-05-03 23:55:21 [Info] key : cpu_all, value : 0
2026-05-03 23:55:21 [Info] key : max_pid_check, value : 200
2026-05-03 23:55:21 [Info] key : throw_dump, value : 0
2026-05-03 23:55:21 [Info] key : hash_mode, value : 1
2026-05-03 23:55:21 [Info] key : mem, value : 200
2026-05-03 23:55:21 [Info] can not find key max_fd in online conf
2026-05-03 23:55:21 [Info] key : proc_limit, value : 1
2026-05-03 23:55:21 [Info] key : resource_limit_mode, value : 3
2026-05-03 23:55:21 [Info] key : rtap_update_mode, value : 1
2026-05-03 23:55:21 [Info] can not find key debug in online conf
2026-05-03 23:55:21 [Info] can not find key update_mode in online conf
2026-05-03 23:55:21 [Info] can not find key http_mode in online conf
2026-05-03 23:55:21 [Info] can not find key rtap_enable in online conf
2026-05-03 23:55:21 [Info] can not find key rtap_new_agent in online conf
2026-05-03 23:55:21 [Info] can not find key rtap_proc_reuse_memsize in online conf
2026-05-03 23:55:21 [Info] can not find key mem_low_mark in online conf
2026-05-03 23:55:21 [Info] can not find key obnormal_report_interval in online conf
2026-05-03 23:55:21 [Info] key : cache_mode, value : 0
2026-05-03 23:55:21 [Info] key : abnormal_monitor_mode, value : 3
2026-05-03 23:55:21 [Info] can not find key rtap_low_mem_force_run in online conf
2026-05-03 23:55:21 [Info] can not find key rtap_small_big_check_size in online conf
2026-05-03 23:55:21 [Info] can not find key rtap_small_mem_limit in online conf
2026-05-03 23:55:21 [Info] can not find key rtap_big_mem_limit in online conf
2026-05-03 23:55:21 [Info] key : queue_size_ratio, value : 80
2026-05-03 23:55:21 [Info] queue_size_ratio is 80
2026-05-03 23:55:21 [Info] resource limit mode and max limit cpu is not change
2026-05-03 23:55:21 [Info] set hash mode 1
2026-05-03 23:55:21 [Info] RTAP timeout config:9600000
2026-05-03 23:55:21 [Info] self_guard_mode config is 0
2026-05-03 23:55:25 [Info] run rtap work --windows-sysinfoext-check with folder C:/Program Files (x86)/Alibaba/Aegis/AliSecCheck
2026-05-03 23:55:25 [Info] ipc client:Rtap193941777823725_handler Reg client_name:Rtap193941777823725 on WhiteList
2026-05-03 23:55:25 [Info] start rtap process success, pid is 3648, argument is Rtap193941777823725
2026-05-03 23:55:25 [Info] New ClientConnectNotify : Rtap193941777823725, id is 0000052C
2026-05-03 23:55:25 [Info] ipc client:Rtap193941777823725 UnReg client_name:protocol_ipc_client on WhiteList
2026-05-03 23:55:25 [Info] Rtap Platform Rtap193941777823725 execv work --windows-sysinfoext-check on pid 3648
2026-05-03 23:55:27 [Info] csrss.exe open proc 3648 AliSecCheck.ex
2026-05-03 23:55:28 [Info] csrss.exe open thread 3648 AliSecCheck.ex
2026-05-03 23:55:32 [Info] Done Work --windows-sysinfoext-check:1
2026-05-03 23:55:32 [Info] Rtap Platform Rtap193941777823725 Exit:normal exit
2026-05-03 23:55:34 [Info] ClientDisConnectNotify : Rtap193941777823725, id is 0000052C
2026-05-04 00:06:39 [Info] exception info: {"aliyundun_avg_cpu":"0","aliyundun_avg_cpu_100times":"0","aliyundun_avg_fd_count":"325","aliyundun_avg_mem":"16422","aliyundun_cpu_high_count":"0","aliyundun_cpu_limit_enable":"1","aliyundun_cpu_limit_error_code":"0","aliyundun_cpu_minute_high_count":"0","aliyundun_cpu_warn_count":"0","aliyundun_max_cpu":"1","aliyundun_max_mem":"16516","aliyundun_upload_time":"1777824399","aliyundun_write_pid_times":"0","ipc_send_count":"147","login_time":"0","mem_usage":"71","module_load_failed":"0","record_login_time":"2","rtap_instance_abnormal":"0","self_guard_state":"0","timer_skew":"0","update_update_fail":"0"}
2026-05-04 00:09:18 [Info] TotalPhys:2047,AvailPhys:585,TotalVirtual:2047,AvailVirtual:1981,TotalPageFile:5900,AvailPageFile:1227,SelfWorkingSet:16276, SelfPageFile:13448
2026-05-04 00:09:18 [Info] CommitTotal:4673,CommitLimit:5900,CommitPeak:7161,PhysicalTotal:2047,PhysicalAvailable:585,SystemCache:294,KernelTotal:260,KernelPaged:174,KernelNonpaged:85,PageSize:4096,HandleCount:27972,ProcessCount:54,ThreadCount:782