Should I block it?

No, this file is 100% safe to run.

Additional versions

1.00.37a	45.83%
1.00.35a	54.17%

Relationships

Parent process

services.exe (Services and Controller app by Microsoft)

Related files

PE file structure

Show functions

Import table

advapi32.dll

ControlService, RegEnumKeyExA, RegCreateKeyExA, RegSetValueExA, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, OpenServiceA, DeleteService, OpenSCManagerA, CreateServiceA, CloseServiceHandle, SetServiceStatus, RegOpenKeyExA, RegQueryValueExA, RegCloseKey

kernel32.dll

lstrlenA, GetLastError, GetVersionExA, GetModuleFileNameA, CloseHandle, ReadFile, SetFilePointer, DeviceIoControl, CreateFileA, GetDriveTypeA, GetModuleHandleA, GetFileAttributesA, MultiByteToWideChar, FindClose, FindNextFileA, FindFirstFileA, InterlockedExchange, LoadLibraryA, GetLocaleInfoA, HeapReAlloc, VirtualAlloc, HeapFree, VirtualFree, HeapCreate, HeapDestroy, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, UnhandledExceptionFilter, GetStdHandle, GetProcAddress, GetCurrentProcess, FreeLibrary, HeapSize, SetUnhandledExceptionFilter, RtlUnwind, VirtualQuery, VirtualProtect, GetSystemInfo, IsBadCodePtr, FlushFileBuffers, SetStdHandle, GetACP, WriteFile, TerminateProcess, GetStringTypeW, GetStringTypeA, LCMapStringW, WideCharToMultiByte, ExitProcess, GetStartupInfoA, GetCommandLineA, HeapAlloc, RaiseException, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, GetOEMCP, GetCPInfo, LCMapStringA

ole32.dll

CoUninitialize, CoInitialize, CoCreateInstance

setupapi.dll

SetupDiGetDeviceRegistryPropertyA, SetupDiSetDeviceRegistryPropertyA, CM_Get_DevNode_Status_Ex, CM_Get_Device_ID_ExA, SetupDiDestroyDeviceInfoList, SetupDiEnumDeviceInfo, SetupDiOpenDeviceInfoA, SetupDiGetClassDevsExA, SetupDiCreateDeviceInfoListExA, SetupDiClassGuidsFromNameExA, SetupDiGetDeviceInfoListDetailA

shell32.dll

SHGetSpecialFolderPathA

user32.dll

DispatchMessageA, KillTimer, SetTimer, PostQuitMessage, FindWindowA, UnregisterClassA, TranslateMessage, GetMessageA, CreateWindowExA, RegisterClassA, PostMessageA, DestroyWindow, DefWindowProcA

SaibSVC.exe

SaibSVC Application by Sonic Solutions (Signed)

Remove SaibSVC.exe

Version:	1.00.35a
MD5:	a15069eec83ebc54150564b2585cfdba
SHA1:	1076c042df910eded6e2c1bbb0d1cf9742865176
SHA256:	ceaf652e38f3222998ed1eaceca73e891e1b47065b4b855d759009945594ff8e

Overview

saibsvc.exe runs as a service under the name Roxio SAIB Service (9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including Roxio BackOnTrack published by Roxio and Roxio BackOnTrack published by Roxio. The file is digitally signed by Sonic Solutions which was issued by the VeriSign certificate authority (CA).

Details

File name:	saibsvc.exe
Product name:	SaibSVC Application
Description:	SaibSVC Application
Typical file path:	C:\Program Files\roxio\backontrack\app\saibsvc.exe
File version:	1.00.35a
Product version:	1, 0, 0, 1
Size:	446.48 KB (457,200 bytes)
Certificate
Issued to:	Sonic Solutions
Authority (CA):	VeriSign
Effective date:	Tuesday, April 21, 2009
Expiration date:	Monday, June 18, 2012
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Roxio BackOnTrack

Roxio

5% remove

“Roxio BackOnTrack Suite is the complete media protection solution that automatically keeps your irreplaceable memories safe and protects your PC from both hardware and software disasters. Instant Restore protects your PC from disasters with the real-time system protection that recovers a system in seconds from virus attacks, rogue web sites, and user mistakes. Back up your entire hard drive, including all your applications and system pr...”

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269' (Roxio SAIB Service)
9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00002874%	0.028634%
Kernel CPU:	0.00001676%	0.013761%
User CPU:	0.00001198%	0.014873%
Kernel CPU time:	29 ms/min	100,923,805ms/min
CPU cycles:	5,633/sec	17,470,203/sec
Memory
Private memory:	1.14 MB	21.59 MB
Private (maximum):	3.22 MB
Private (minimum):	2.47 MB
Non-paged memory:	1.14 MB	21.59 MB
Virtual memory:	41.51 MB	140.96 MB
Virtual memory (peak):	43.23 MB	169.69 MB
Working set:	2.55 MB	18.61 MB
Working set (peak):	3.85 MB	37.95 MB
Page faults:	2,104/min	2,039/min
I/O
I/O read transfer:	2 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	0 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	2 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	3	12
Handles:	66	600

Process properties

Integrety level:	System
Platform:	32-bit
Command lines:	"C:\Program Files\roxio\backontrack\app\saibsvc.exe" "C:\Program Files\roxio\backontrack\disaster recovery\saibsvc.exe"
Owner:	SYSTEM
Windows Service
Service name:	9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269
Display name:	Roxio SAIB Service
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads