Check Point Endpoint - Random Character Folder/File names

[drkmtr]

Hi Everyone,

Can anyone please explain and/or point me to the correct documentation that explains the random character folder/filenames throughout the Windows file system that Check Point Endpoint creates, as per attached screenshot?

[PhoneBoy · Accepted solution]

These "random" filesnames are likely used as part of Anti-Ransomware.
I assume these names have changed over time as malicious actors change their tactics to prevent being caught.

https://sc1.checkpoint.com/documents/HarmonyEndpoint/Endpoint_Security_Clients_for_Windows_UserGuide...