FCDBLog.exe

by Fortinet
Network Security

Sources: 300M+ executions observed in the wild.

Summary

FortiClient Database Logger - logs FortiClient events to the local database.

FCDBLog.exe is the 1044th most commonly executed Windows program in EchoTrail's dataset, observed 1,850 times across enterprise environments. It typically runs from C:\Program Files (x86)\Fortinet\FortiClient.

Get this in your tools

The same record for fcdblog.exe, by REST or as an MCP tool. Free key, no card.

Get a free key
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
  https://api.echotrail.io/v1/process/fcdblog.exe

Free returns the summary. Team returns the full record you see on this page. Endpoint docs

1044th
most commonly executed Windows program
1,850
observed endpoint executions

Behavior

Top Paths

  • C:\Program Files (x86)\Fortinet\FortiClient97.35%
  • C:\Program Files\Fortinet\FortiClient2.65%

Top Hashes (SHA256)

  • f0f8a01e8d36d81c9ef761d896eb28ad613a24c11cc329cd404281ac4b7b6fe020.8%
  • 2f28fa28f0be1c56cbd237ae5970acdd62e6ca1a9527c9d4f9779d19c624f46019.67%
  • 8cb2530fa9e8535936367931e9519df28cd0328c0f1ded1996fed47fc2f6f3e915.02%
  • bbe691b7191ac1775a74692f8b270204c72d3bc503c1db8da8cbfa6242aac4f611.11%
  • ac1ec25a059b17e97c29b4b30664e70d028248d46a8c98e129921b8d4413faec9.52%
  • 7da3d3897eb716e51a91f490d5fdb114f11bcfdd4d3a20e56049a4452cd812995.73%
  • 598677a398a2c3bb5c6ee34bd0709ff4cacd910f0e0141fe9142881d11ed119f4.76%
  • 64d69cbe7b80bbb03a1c210d3d3f7a0d54d5992a1f71a94350a4d7a5f3a0d8f03.06%
  • 5865873bf5a7ef4ad5abe4f5a729af95ce4589881566de03d4e78669def71de62.66%
  • d9d77297a2f4ebacd88213872834bbbddcf92e43de2e4839218097003d970a6a2.15%

Process Ancestry

Top Grandparents

Top Children

Ask Rocky about FCDBLog.exe

Rocky is the free chat demo. It answers from this same dataset, no account needed.

This page is the Team-tier API record for FCDBLog.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.