home

downloads.endpoint.evault.com

Carbonite, Inc

Domain Information

The domain downloads.endpoint.evault.com registered by Carbonite, Inc was initially registered in May of 1998 through MARKMONITOR INC.. The hosted servers are located in Redmond, Washington within the United States which resides on the Microsoft Corporation network.
Registrar:
CSC CORPORATE DOMAINS, INC.

Server location:
Washington, United States (US)

Create date:
Friday, May 29, 1998

Expires date:
Sunday, May 28, 2017

Updated date:
Tuesday, March 15, 2016

ASN:
AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation

Root domain:
evault.com

Whois:
2 evault.com records

The domain downloads.endpoint.evault.com has been seen to resolve to the following IP address.

23.98.49.206
blob.ch3prdstr03a.store.core.windows.net
January 30, 2016

File downloads found at URLs served by downloads.endpoint.evault.com.

1 / 68
http://downloads.endpoint.evault.com/.../DCProtectInstall.EXE  (8a5ff012689d89b84c027afd6093b79f)

0 / 68
http://downloads.endpoint.evault.com/client/.../DCProtectInstall.EXE  (18fde5a52a69b9d539939903b8fd2122)

1 / 68
http://downloads.endpoint.evault.com/.../DCProtectInstall.EXE  (a6fd230d3ad3b95874c11f96ed6c0848)

The following 11 files have been seen to comunicate with downloads.endpoint.evault.com in live environments.

TCP » 23.98.49.206:443
seznam.cz.exe

TCP » 23.98.49.206:443
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.98.49.206:443
online-guardian-v2.0.9.exe

TCP » 23.98.49.206:80
kometa.exe (Kometa by Kometa Authors)

TCP » 23.98.49.206:443
online-guardian-v2.0.9.exe

TCP » 23.98.49.206:443
onlineguardian-v2.exe

TCP » 23.98.49.206:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.98.49.206:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 23.98.49.206:80
apptrailers.exe

TCP » 23.98.49.206:80
online-guardian-v2.0.9.exe

TCP » 23.98.49.206:443
ssn.exe (ssn)

TCP » 23.98.49.206:80
vosteran.exe

TCP » 23.98.49.206:80
valueapps.exe (ValueApps.exe by Conduit)

URL:
http://downloads.endpoint.evault.com/

Web server:
Microsoft-HTTPAPI/2.0

cloanto.net

mcmodkit.com

windows.net

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.