home

hwrms.com

Whois Privacy Protection Service by VALUE-DOMAIN

Domain Information

The domain hwrms.com registered by Whois Privacy Protection Service by VALUE-DOMAIN was initially registered in April of 2016 through GMO INTERNET, INC. DBA ONAMAE.COM. The hosted servers are located in Cambridge, Massachusetts within the United States which resides on the Prolexic Technologies, Inc. network.
Registrar:
GMO INTERNET, INC. DBA ONAMAE.COM

Server location:
Massachusetts, United States (US)

Create date:
Sunday, April 10, 2016

Expires date:
Monday, April 10, 2017

Updated date:
Sunday, April 10, 2016

ASN:
AS32787 PROLEXIC-TECHNOLOGIES-DDOS-MITIGATION-NETWORK - Prolexic Technologies, Inc.,US

Whois:
1 hwrms.com record

The domain hwrms.com has been seen to resolve to the following IP address.

72.52.4.121
unknown.prolexic.com
June 4, 2016

File downloads found at URLs served by hwrms.com.

4 / 68      (inconclusive)
http://hwrms.com/blog/wp-content/uploads/2008/.../tcpip.exe  (a46eea416cb79df2cecb42f43860c5ce)

The following 36 files have been seen to comunicate with hwrms.com in live environments.

TCP » 72.52.4.121:80
lsass.exe

TCP » 72.52.4.121:80
data toñoxix.exe

TCP » 72.52.4.121:80
services.exe

TCP » 72.52.4.121:80
winlogon.exe

TCP » 72.52.4.121:80
downloads.exe

TCP » 72.52.4.121:80
administrador's setting.scr

TCP » 72.52.4.121:80
csrss.exe

TCP » 72.52.4.121:80
services.exe

TCP » 72.52.4.121:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 72.52.4.121:80
browserairexec.exe (BrowserAir by Goobzo)

TCP » 72.52.4.121:80
inetinfo.exe

TCP » 72.52.4.121:80
browser.exe (Browser)

TCP » 72.52.4.121:80
ExpressFiles.exe (ExpressFiles Application by http://www.express-files.com/)

TCP » 72.52.4.121:80
empty.pif

TCP » 72.52.4.121:80
csrss.exe

TCP » 72.52.4.121:80
csrss.exe

TCP » 72.52.4.121:80
ContentFinder.exe (ContentFinder by ContentFinder Software)

TCP » 72.52.4.121:80
jingling.exe

TCP » 72.52.4.121:80
viber.exe

TCP » 72.52.4.121:80
services.exe

 
Latest 20 of 38 files

URL:
http://hwrms.com/

Title:
“hwrms.com -&nbspThis website is for sale! -&nbsphwrms Resources and Information.”

Description:
“This”

Web server:
Apache/2.2.22 (Debian)

i-sure.com

iispace.net

infineoninc.com

jakva.com

jdsaoiehrsreincvacgrabdl.com

my7vision.fr

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.