AlipaySecSvc.exe
alieditplus by Alipay.com Co. (Signed)
Warning 3 antivirus scanners has detected malware in various versions of AlipaySecSvc.exe.
Overview
alipaysecsvc.exe has 3 known versions, the most recent one is 1, 0, 41, 0. It is started as a Windows Service called 'AlipaySecSvc' with the name 'AlipaySecSvc'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 446.86 KB. It is an authenticode code-signed executable issued to Alipay.com Co. by the certification authority VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0004% including both foreground and background operations, the average private memory consumption is about 4.75 MB with the maximum memory reaching around 8.11 MB. Addionally, typically read and write I/O disk operations is about 1.45 KB per minute for reads and 5 Bytes per minute for writes.
Details |
File name: | alipaysecsvc.exe |
Publisher: | Alipay Inc. |
Product name: | alieditplus |
Description: | Alipay security service |
Typical file path: | C:\Program Files\alipay\alieditplus\alipaysecsvc.exe |
Certificate |
Issued to: | Alipay.com Co. |
Authority (CA): | VeriSign |
Windows Service |
Service name: | AlipaySecSvc |
Display name: | AlipaySecSvc |
Type: | Win32OwnProcess |
Behaviors
(Note, the behaviors below are for all versions of alipaysecsvc.exe, select a unique version for details.)
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- AlipaySecSvc
- 'AlipaySecSvc' (Alipay security service)
Malware detections
Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
Antivirus engine | Engine version | Detection | File version |
Antiy Labs AVL |
2.0.3.7 |
Trojan/Win32.VB |
1, 0, 14, 0 |
nProtect |
2013-07-11.04 |
Trojan/W32.Agent.319840.B |
1, 0, 14, 0 |
Vba32 AntiVirus |
3.12.22.2 |
Trojan.Agent |
1, 0, 14, 0 |
All file variations of alipaysecsvc.exe