Windows - the inetpub folder
Don't delete it. It's part of the solution to CVE-2025-21204
With the release of the April 2025 cumulative update (KB5055523) for Windows 10 and higher, there is a new folder at the root of the system drive: C:\inetpub. Traditionally associated with IIS. This folder’s unexpected appearance raised questions, especially on systems where IIS is not installed or enabled.
If you delete it, you will need to reinstall the patch.
Abusing the Windows Update Stack to Gain SYSTEM Access (CVE-2025-21204)
The CVE-2025-21204 is precisely that kind of vulnerability. It doesn’t require a zero-day exploit or complex memory corruption chain. It doesn’t need a phishing campaign or a dropped malware loader. All it takes is: A misused filesystem trust, a writable folder, and a SYSTEM process doing what it was built to do.
SecWriter
Your stuck with it. Read the article.
#enoughsaid