IOC: WorkFolders.exe should not be run on a normal workstation
Execute
Execute control.exe in the current working directory
WorkFolders
Usecase: Can be used to evade defensive countermeasures or to hide as a persistence mechanism
Privileges required: User
OS: Windows 8, Windows 8.1, Windows 10
MITRE ATT&CK®: T1218