The host at this IP address (13.90.173.206) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
http://osdsoft.com/update20180524/explorer.exe
AS number: AS8075
AS name: MICROSOFT-CORP-MSN-AS-BLOCK