Hi everyone…
We are facing the same problem, and searching on internet we found the following articule:
https://appuals.com/what-is-windows-shell-experience-host-shellexperiencehost-exe
I cannot assure the veracity of this information, but seems we are dealing with a trojan that is mining cryptocurrencies.