New
#11
There have been previous reports of folders with similar names- albeit in a different location e.g.
https://social.technet.microsoft.com...0itprosecurity
Some attribute these to a MS provisioning tool.
If you wish to determine exactly what is creating these, you might try using Sysinternals ProcMon with a suitable filter. Perhaps not for the fainthearted.
There are tools that can monitor folders for specific changes, but won't help identifying what caused the change.
5 Of The Best Tools To Monitor Folder For Changes In Real-time