Windows Office Product Spawning Control.exe

The analytic identifies instances where `control.exe` is spawned by a Microsoft Office product. This activity can indicate exploitation attempts, specifically related to CVE-2021-40444, where `control.exe` is used to execute malicious .cpl or .inf files. If confirmed malicious, this behavior could allow an attacker to execute arbitrary code, potentially leading to system compromise, data exfiltration, or further lateral movement within the network.