The host at this IP address (130.211.137.50) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
http://hmbwgroup.com/wp-includes/js/tinymce/themes/inlite/ali.exe
http://hmbwgroup.com/wp-includes/js/tinymce/themes/inlite/fr.exe
http://hmbwgroup.com/wp-includes/js/tinymce/themes/inlite/thai.exe
http://hmbwgroup.com/wp-includes/js/tinymce/themes/inlite/bnt.exe
http://hmbwgroup.com/wp-includes/js/tinymce/themes/inlite/yu.exe
AS number: AS15169
AS name: GOOGLE
Hostname: 50.137.211.130.bc.googleusercontent.com