OfflineScannerShell.exe

Windows Defender Offline Shell

Execute

Can be used to evade defensive countermeasures or to hide as a persistence mechanism

OfflineScannerShell

Execute mpclient.dll library in the current working directory — MITRE: T1218 — Privileges: Administrator