home

updates.macrium.com

Paramount Software UK Ltd

Domain Information

The domain updates.macrium.com registered by Paramount Software UK Ltd was initially registered in July of 2005 through MELBOURNE IT, LTD. D/B/A INTERNET NAMES WORLDWIDE. The hosted servers are located in Karlsruhe, Baden-Wurttemberg within Germany which resides on the RIPE Network Coordination Centre network.
Registrar:
FREEPARKING DOMAIN REGISTRARS, INC

Server location:
Baden-Wurttemberg, Germany (DE)

Create date:
Monday, July 25, 2005

Expires date:
Monday, July 25, 2022

Updated date:
Monday, February 9, 2015

ASN:
AS8560 ONEANDONE-AS 1&1 Internet AG

Root domain:
macrium.com

Whois:
2 macrium.com records

The domain updates.macrium.com has been seen to resolve to the following IP address.

82.165.36.138
macrium.com
January 26, 2014

File downloads found at URLs served by updates.macrium.com.

0 / 68
http://updates.macrium.com/viboot/v6.0/.../vibootsetup.msi  (3746a30ec863079b42e511a2e5ce24e9)

8 / 68      (Infected)
http://updates.macrium.com/reflect/.../ReflectDL.exe  (4e9d14f5b5a18ed6634afbdd806bf219)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDL.exe  (53a428bb4886d4401afd9434ed54fde7)

0 / 68
https://updates.macrium.com/reflect/.../ReflectDLFull.exe  (ReflectDL.exe)

0 / 68
http://updates.macrium.com/reflect/.../reflectdl.exe  (44ec7b3f7bfa980ac3f79cfd0b46caa1)

0 / 68
http://updates.macrium.com/reflect/v5.0/.../reflect_setup_free.exe  (reflect_setup_free_5.1.5396.exe)

0 / 68
http://updates.macrium.com/Reflect/.../getmsi.asp?edition=0&type=99&arch=1&redirect=Y  (v6.0.753_reflect_setup_free_x64.exe)

0 / 68
http://updates.macrium.com/reflect/.../vssfix.exe  (07d7b6c83673236de5fcc5fedd74d857)

0 / 68
http://updates.macrium.com/reflect/.../reflectdlfull.exe  (ReflectDL.exe)

0 / 68
http://updates.macrium.com/reflect/.../reflectdlupgrade.exe  (ReflectDL.exe)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDL.exe  (44ec7b3f7bfa980ac3f79cfd0b46caa1)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDLFull.exe  (ReflectDL.exe)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDL.exe  (reflectdlfull.exe)

0 / 68
http://updates.macrium.com/reflect/.../reflectdl.exe  (a232626389530c159a96763262598598)

0 / 68
http://updates.macrium.com/reflect/.../reflectdlfull.exe  (ReflectDL.exe)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDL.exe  (macrium reflect free 6.0.482.exe)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDL.exe  (743c807fa07f8df7312c3e0e5b6e8132)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDLFull.exe  (7af214c5a279a21e01af2d714e743180)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDLFull.exe  (ReflectDL.exe)

0 / 68
http://updates.macrium.com/reflect/.../reflectdl.exe  (50dc37ece542ec744716def6de40fadb)

0 / 68
http://updates.macrium.com/reflect/.../reflectdl.exe  (d355ebc459a388787f16e55280eb4c74)

0 / 68
http://updates.macrium.com/Reflect/.../ImgToVHD.msi  (e556c2bdbb4ab45e199a62149809c553)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDLFull.exe  (ReflectDL.exe)

0 / 68
http://updates.macrium.com/reflect/.../inject.exe  (f22e47b788a56cd42067c8f541a2b3cc)

0 / 68
http://updates.macrium.com/reflect/.../ReflectDLFull.exe  (41205c427de09ada0d2097fcc00220e2)

0 / 68
http://updates.macrium.com/reflect/.../reflectdlfull.exe  (macrium_reflect_free_v5.2.6444.exe)

0 / 68
http://updates.macrium.com/reflect/.../reflectdlfull.exe  (ReflectDL.exe)

0 / 68
http://updates.macrium.com/reflect/.../reflectdl.exe  (734bbf00382dfb28f9380a7ca4a381f7)

0 / 68
http://updates.macrium.com/reflect/.../vssfixx64.exe  (ac33344f54ebefbf3ff3ef3dac50f2f3)

The following file have been seen to comunicate with updates.macrium.com in live environments.

TCP » 82.165.36.138:80
reflect.exe (Macrium Reflect by Paramount Software UK)

URL:
http://updates.macrium.com/

SSL certificate subject:
CN=*.macrium.com, OU=COMODO SSL Wildcard, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
Microsoft-IIS/7.5 (ASP.NET)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.