Check Point Endpoint - Random Character Folder/File names

drkmtr — Thu, 05 Jun 2025 05:30:09 GMT

Hi Everyone,

Can anyone please explain and/or point me to the correct documentation that explains the random character folder/filenames throughout the Windows file system that Check Point Endpoint creates, as per attached screenshot?

Re: Check Point Endpoint - Random Character Folder/File names

PhoneBoy — Thu, 05 Jun 2025 17:14:35 GMT

These "random" filesnames are likely used as part of Anti-Ransomware.
I assume these names have changed over time as malicious actors change their tactics to prevent being caught.

https://sc1.checkpoint.com/documents/HarmonyEndpoint/Endpoint_Security_Clients_for_Windows_UserGuide/Content/Endpoint-Clients-UG/macOS-Win-UG-Shared-Topics/FAR-Anti-Ransomware.htm

topic Check Point Endpoint - Random Character Folder/File names in Endpoint

Check Point Endpoint - Random Character Folder/File names

Re: Check Point Endpoint - Random Character Folder/File names