Why is powershell trying to access "%system%\CatRoot" "C:\ProgramData"

[sknightmare]

it's been weeks since these started to show up in windows controlled folder access, this never happened before in all the time I've had folder acces oni've done some search on what the catroot folder it's used for and the only clue here it's that i've been avoidind windows updates using the metered connection setting to prevent from doing things on its own 2023-04 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5025221) Status: Pending downloadthis it's the update that it's showing pending since i left the metered connection check on, i'm not able to download big updates

Continue reading...