account arrowhead-down arrowhead-up mobile-menu search sm-bold-x x-skinny-rounded x-skinny arrowhead-right social-facebook social-googleplus social-instagram social-linkedin social-pinterest social-qzone social-renren social-tencent social-twitter social-vkontakt social-weibo social-youku social-youtube

Please help us improve our website

Take our customer survey to evaluate your visit.

It should only take a few minutes to answer five quick questions. Just click the Launch survey button at the end of your visit to begin.

cancel
Showing results for 
Search instead for 
Did you mean: 
Tips & Tricks

Troubleshoot, find support articles, run tests directly on your phone with the support application.
Read more and discuss the app here.

New Phone - Found Mysterious Files in Downloads Folder

Rookie
Message 1 of 4
3,949 Views
Message 1 of 4

New Phone - Found Mysterious Files in Downloads Folder

Hi, I got a new XZ1 today but I found some mysterious files in the downloads folder I hope somebody can help shed light on in-case they are malicious or if somebody has tampered with the phone.

 

I purchased the phone from a listed retailer on the Sony mobile website.

 

Here is a list:

  • rce_plugin_string_resource_pt_BR.json.min
  • rce_plugin_string_resource_fr_FR.json.min
  • rce_plugin_string_resource_de_DE.json.min
  • rce_plugin_string_resource_en_US.test.json.min
  • rce_plugin_string_resource_it_IT.json.min
  • rce_plugin_string_resource_es_ES.json.min
  • rce_plugin_string_resource_cz_CZ.json.min
  • rce_plugin_string_resource_ja_JP.json.min
  • rce_plugin_string_resource_v2_TYPO_TEST.json.min
  • rce_plugin_string_resource_zh_CN.json.min
  • rce_plugin_string_resource_nl_NL.json.min
  • CS_JIT_Animation.mp4
  • jit_cs_positive_preview.png

 

I found the MP4 file on gfycat (uploaded by somebody else) by Google search.

 

Here: https://gfycat.com/gifs/detail/generouspinkcolt

 

I checked some of the other files on my PC using VSCode, they look like this:

 

Annotation 2018-11-25 203703.jpg

 

I'm unsure what I should do, any help apreciated, thanks!

 

I found another user on the OnePlus forums with the same exact issue.

 

https://forums.oneplus.com/threads/unkown-files-in-download.948860/

3 REPLIES 3
One time poster
Message 2 of 4
3,872 Views
Message 2 of 4

Re: New Phone - Found Mysterious Files in Downloads Folder

I just found these on my phone as well. I know they weren't there yesterday because they're in a folder I open almost daily. The only apps I've downloaded onto my phone recently were Audible and Kindle, so I assume one of those is the culprit. Especially because the .MP4 file looks like it might be a short animation of how to turn a page in a document reader by making a swiping motion with your finger. I couldn't really say whether it's actually malicious or not, though. 

Rookie
Message 3 of 4
3,818 Views
Message 3 of 4

Re: New Phone - Found Mysterious Files in Downloads Folder

Thanks! I uninstalled the updates to the Kindle app and reinstalled them, the files seem to reappear after the Kindle app is opened the first time after the update. I did this about four times and it's consistent.

 

I notice they have an update log which states "continuous scrolling" is coming soon in the what's new section, which may be what the animation refers to.

 

I'll contact the developer and see if they can confirm.

 

Thanks again!

One time poster
Message 4 of 4
3,695 Views
Message 4 of 4

Re: New Phone - Found Mysterious Files in Downloads Folder

Hey KiteRyu,

 

Just checking in to see if you received a response from the developer. I have the same exact files in my downloads folder on my Sony phone and on an old Samsung tablet. I recently downloaded the Kindle app on both devices and I noticed that these files appeared in my Files app around the same time.

 

I'm not that knowlegable about how plugins work, but when I did a quick search on rce I grew concerned about the possibility of the file name denoting a remote code execution as well.  

 

 Would love to hear if you figure out what these files are or if you get a response from the developer.

 

Thanks in advance.