The host at this IP address (172.217.20.78) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
https://docs.google.com/uc?authuser=0&id=1423iV9Ze5V1pNpU0omqvp-u46EpKft94&export=download
https://docs.google.com/uc?export=download&id=1ia3WELHtRhs0Fe4ag2_O0aVkyzi_zUpx
https://docs.google.com/uc?id=12yy_E3aTtAWOPqYdrXPvgj92EqjkVV1n&export=download
https://docs.google.com/uc?id=1AworRdLimD73EzlkeIUdCkJcvSFCUC_m
AS number: AS15169
AS name: GOOGLE — Google LLC
Hostname: ams15s33-in-f14.1e100.net