home

fbsetup.exe

FBackup 5.0

Softland S.R.L.

This is the uninstaller utility registered in the Windows Control Panel for the program FBackup 5.0 by Softland. This is installed with FBackup 5.0. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Softland  (signed by Softland S.R.L.)

Product:
FBackup 5.0

Version:
5.0.218.0

MD5:
dbf12a049e78d53ce3e00284120667be

SHA-1:
55945dd7d0f35ae7e272ce3afc20cae9cc7416c2

SHA-256:
f85a1ce3dfc008f8d8c5b34fbab0ff113e877c221b4aec89538dd47e550b245f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:10:49 PM UTC  (today)

File size:
1.1 MB (1,176,440 bytes)

Product version:
5.0.218.0

Copyright:
Copyright (c) Softland. All rights reserved.

Original file name:
backupBootstrapper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\fbsetup.exe

Digital Signature
Signed by:
Softland S.R.L.

Authority:
VeriSign, Inc.

Valid from:
1/29/2013 10:00:00 PM

Valid to:
3/31/2014 8:59:59 PM

Subject:
CN=Softland S.R.L., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Softland S.R.L., L=Cluj-Napoca, S=Cluj, C=RO

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5A0A9BA760991132F47D1A5060AC240A

File PE Metadata
Compilation timestamp:
12/24/2012 7:43:11 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:IRtlXDRCypLbz2tHxMhvltmYpab/V+xuw:+HpHz2tHxMhvnmu6suw

Entry address:
0x25D1C

Entry point:
E8, 1E, 1F, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, E8, 3E, 45, 00, 00, 74, 05, E9, 7E, 1F, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7, 01, 83, EA...
 
[+]

Entropy:
5.9270

Code size:
218 KB (223,232 bytes)

Program Uninstaller
Program name:
FBackup 5.0

Display publisher:
Softland

Display version:
5.0.218.0

Uninstall string:
"C:\ProgramData\Package Cache\{c8427ed5-6423-4876-8a46-7f04b70f8af5}\backupBootstrapper.exe" /uninstall


The file fbsetup.exe has been discovered within the following program.

FBackup 5.0  by Softland
www.fbackup.com
About 6% of users remove it
 
Powered by Should I Remove It?

The file fbsetup.exe has been seen being distributed by the following 2 URLs.

http://gsf-cf.softonic.com/559/45d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=76862&instance=softonic_es&type=PROGRAM&Expires=1445264379&Signature=b7vA2o2LuQuSfm3bbwTciBqkncCh5ug7dpw-QUibRW0up~0s5i4CkQ43xxNFiIR9CELGQFDElf74CbMgko~QADN7kZOlUjTmuQ3-OLifWNyC6zVlfw3SpwtVuB4TvhmNIOwjQ2EvqY9GClhBp0NQCZJRJsoJQgRRZjJfGe0Y064_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=fbsetup.exe

http://www.fbackup.com/download/.../fbsetup.exe

Scan fbsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.