The host at this IP address (137.117.47.68) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
http://osdsoft.com/update20180524/explorer.exe
AS number: AS8075
AS name: MICROSOFT-CORP-MSN-AS-BLOCK — Microsoft Corporation