AlipaySecSvc.exe
alieditplus by Alipay.com Co. (Signed)
| Version: | 1, 0, 14, 0 |
| MD5: | f3d94e366a918638f59a679ad70c71a9 |
| SHA1: | 25285edb7b2de48efab0b6008fe28b943aad23b2 |
| SHA256: | b3f928eae07ce985ad89ccd01d450ccd8db56aea07207df47ce2ebe08cdb37cc |
Warning 3 antivirus scanners has detected malware.
Overview
alipaysecsvc.exe is malware that runs as a service under the name AlipaySecSvc (AlipaySecSvc) with extensive SYSTEM privileges (full administrator access). The file is digitally signed by Alipay.com Co. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | alipaysecsvc.exe |
| Publisher: | Alipay Inc. |
| Product name: | alieditplus |
| Description: | Alipay security service |
| Typical file path: | C:\Program Files\alipay\alieditplus\alipaysecsvc.exe |
| File version: | 1, 0, 14, 0 |
| Product version: | 1, 5, 0, 0 |
| Size: | 312.34 KB (319,840 bytes) |
| Certificate |
| Issued to: | Alipay.com Co. |
| Authority (CA): | VeriSign |
| Digital DNA |
| PE subsystem: | Windows Console |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
- AlipaySecSvc
- 'AlipaySecSvc' (Alipay security service)
Malware detections
Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Antiy Labs AVL |
2.0.3.7 |
Trojan/Win32.VB |
| nProtect |
2013-07-11.04 |
Trojan/W32.Agent.319840.B |
| Vba32 AntiVirus |
3.12.22.2 |
Trojan.Agent |
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00060354% | |
| Kernel CPU: | 0.00025797% | |
| User CPU: | 0.00034557% | |
| Kernel CPU time: | 386,664 ms/min | |
| Context switches: | 34/sec | |
| Memory |
| Private memory: | 2.21 MB | |
| Private (maximum): | 5.36 MB | |
| Private (minimum): | 5.25 MB | |
| Non-paged memory: | 2.21 MB | |
| Virtual memory: | 51.84 MB | |
| Virtual memory (peak): | 57.98 MB | |
| Working set: | 5.36 MB | |
| Working set (peak): | 6.59 MB | |
| Resource allocations |
| Threads: | 12 | |
| Handles: | 221 | |
Process properties
| Integrety level: | System |
| Platform: | 32-bit |
| Command line: | "C:\Program Files\alipay\alieditplus\alipaysecsvc.exe" |
| Owner: | SYSTEM |
| Windows Service |
| Service name: | AlipaySecSvc |
| Display name: | AlipaySecSvc |
| Type: | Win32OwnProcess |
| Parent process: | services.exe (Services and Controller app by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Professional |
40.00% |
|
| Windows 8.1 |
20.00% |
|
| Windows 8 Enterprise |
20.00% |
|
| Windows 7 Enterprise |
20.00% |
|
Distribution by country
China installs about 40.00% of alieditplus.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Lenovo |
50.00% |
|
| Toshiba |
25.00% |
|
| Alienware |
12.50% |
|
| GIGABYTE |
12.50% |
|
