Help Unknown download

[fakewooder]

This is driving me nuts. I have a file in my Downloads folder that I don't recall downloading.

I can't find any record of the download in chrome, Firefox, download managers, etc. I can't figure out what source I might have downloaded it from, or which app was used to download it.

There was a notification of the completed download, which played the file when tapped, but that caused the notification to disappear, and now I seem to have no way of tracking it down.

The only clue is the filename, a long string in hex. Like so

fb249a29-e864-42be-b044-7c4c94d902d0.mp3

What app, or server, might generate such a name?

(For example, Google Voice voicemail downloads have the format

Voicemail_18886597322_20210330.mp3

showing phone number, and timestamp.)

Can anyone give me an idea?

 

[olbriar]

With the file name string starting with fb... FaceBook?

 

[fakewooder]

With the file name string starting with fb... FaceBook?

Don't think so. It seems to be part of the Hex string.

Does anyone have a facebook download with a similar format?

I'm not signed in to FB, but it's possible that someone else sent me the file.

 

[Six dots Software]

As long as you don't open it... Just remove it.

 

[fakewooder]

As long as you don't open it... Just remove it.

I'm trying to figure out how it got there. I'm pretty sure the file is safe. (Just checked on virustotal to be sure. No issues found.)

This is not a file that would be widely available online. It would have to come from a close contact. (Voicemail download, social media post, file sharing, etc.)

 

[fakewooder]

Don't think so. It seems to be part of the Hex string.

Does anyone have a facebook download with a similar format?

I'm not signed in to FB, but it's possible that someone else sent me the file.

It actually seems to be UUID, likely generated by some server. But I'm not sure who or what is saving files on my phone.

 

[lunatic59]

Since the file presents as media, would the contents give you a good clue where it came from? If you are concerned about potential malicious activity, you could copy it off the phone and boot a PC using a Linux flash drive.

 

[fakewooder]

Since the file presents as media, would the contents give you a good clue where it came from? If you are concerned about potential malicious activity, you could copy it off the phone and boot a PC using a Linux flash drive.

The contents are vaguely familiar. It does play normally on any audio player. But I can't locate the exact source of the download. The UUID filename is strange, suggesting some automated process. It seems like it was pushed to the device, somehow.

Virustotal found no issues, and I don't think it's malware. But the whole situation is strange.

 

[fakewooder]

The contents are vaguely familiar. It does play normally on any audio player. But I can't locate the exact source of the download. The UUID filename is strange, suggesting some automated process. It seems like it was pushed to the device, somehow.

Virustotal found no issues, and I don't think it's malware. But the whole situation is strange.

I tracked it down, eventually. This was an attachment to an email sent to me over a year ago.

The Yahoo! Mail App keeps a list of attachments, separately from the main inbox, and I probably absentmindedly tapped on one, which immediately downloads, with no confirmation, and no record of the download, anywhere in the app or OS.

It's absolutely ridiculous that Android doesn't keep a history of its downloads, somewhere that the user can see them.

 

[puppykickr]

I tracked it down, eventually. This was an attachment to an email sent to me over a year ago.

The Yahoo! Mail App keeps a list of attachments, separately from the main inbox, and I probably absentmindedly tapped on one, which immediately downloads, with no confirmation, and no record of the download, anywhere in the app or OS.

It's absolutely ridiculous that Android doesn't keep a history of its downloads, somewhere that the user can see them.

Well, that would suck from a security standpoint.

Anyway, my typical MO is that when I go through my downloads, I move them into folders in my storage to keep them organized and easier to find on demand.

I try not to let too many pile up beforehand.

One thing you could do is try to see if there is a setting in the e-mail app to designate a folder for downloads just for that app.

Most of my apps are like that.

So, I have a 'Downloads' folder, and inside that are multiple othe folders- named for the apps that they are for.

In my Gallery, videos and pictures show up in the folders of the apps they came from.

In my file manager, I select Downloads, and all the other folders appear.
Downloads also becomes a general download recepticle for my browsers, although not separated with individual folders.

 

[mikedt]

I tracked it down, eventually. This was an attachment to an email sent to me over a year ago.

The Yahoo! Mail App keeps a list of attachments, separately from the main inbox, and I probably absentmindedly tapped on one, which immediately downloads, with no confirmation, and no record of the download, anywhere in the app or OS.

It's absolutely ridiculous that Android doesn't keep a history of its downloads, somewhere that the user can see them.

But it wasn't Android's download, it was some third-party user-installed app that did it. Does any OS keep a history of downloads via third-party software? Maybe you should address your grievances to the app's developer?

 

[fakewooder]

Well, that would suck from a security standpoint.

Anyway, my typical MO is that when I go through my downloads, I move them into folders in my storage to keep them organized and easier to find on demand.

I try not to let too many pile up beforehand.

One thing you could do is try to see if there is a setting in the e-mail app to designate a folder for downloads just for that app.

Most of my apps are like that.

So, I have a 'Downloads' folder, and inside that are multiple othe folders- named for the apps that they are for.

In my Gallery, videos and pictures show up in the folders of the apps they came from.

In my file manager, I select Downloads, and all the other folders appear.
Downloads also becomes a general download recepticle for my browsers, although not separated with individual folders.

What would be the problem, from a security standpoint?

Any browser (including Firefox, which is supposedly security-conscious) keeps a list of downloads. Android's Download Manager (which you see in the Notification screenshot) could have a user-facing app, that when opened, shows all downloads. Bonus if it shows which app requested each download.

There could be an option to clear the history, of course, just like in Firefox.

Anyway, I did check the mail app, there's no option to choose your download folder. At least I couldn't find it. I would actually prefer a confirmation dialogue before downloading.

 

[fakewooder]

But it wasn't Android's download, it was some third-party user-installed app that did it. Does any OS keep a history of downloads via third-party software? Maybe you should address your grievances to the app's developer?

Check the screenshot above. The download was pulled by Android's Download Manager. This is a pre-installed system app that handles general download requests for other apps. (See attached pic.) But the user can't access it to see what it's been doing.

The same is true for Notifications, at least on some versions/devices. Android has a record of all notifications (including dismissed ones) but the user can't access it. I had to get a third-party app to see my own notifications. (https://play.google.com/store/apps/details?id=com.aospstudio.notificationlog) There's no reason for Android not to include that.

 

[mikedt]

What would be the problem, from a security standpoint?

Any browser (including Firefox, which is supposedly security-conscious) keeps a list of downloads. Android's Download Manager (which you see in the Notification screenshot) could have an user-facing app, that when opened, shows all downloads. Bonus if it shows which app requested each download.

Android's Download Manger? I don't have one of them in a Samsung Note20 Ultra (Andoid 11) phone I have here. Firefox has it's own Downloads options, which is found in the Firefox app itself.

 

[mikedt]

Check the screenshot above. The download was pulled by Android's Download Manager. This is a pre-installed system app that handles general download requests for other apps. (See attached pic.) But the user can't access it to see what it's been doing.

The same is true for Notifications, at least on some versions/devices. Android has a record of all notifications (including dismissed ones) but the user can't access it. I had to get a third-party app to see my own notifications. (https://play.google.com/store/apps/details?id=com.aospstudio.notificationlog) There's no reason for Android not to include that.

I definitely don't have that on the phone's I've got here, a Samsung(Android 11) and a Huawei(Android 10). What device have you actually got there?

 

[mikedt]

Out of interest I checked to see if MacOS keeps any records of where downloads came from, apparently it does, in supported software. Files downloaded via Firefox, do, and I can see the details in the Finder, however I often receive files via Wechat, and that doesn't keep any records of downloaded and received in the Finder.

Maybe Windows does the same, but I don't use that.

 

[fakewooder]

I definitely don't have that on the phone's I've got here, a Samsung(Android 11) and a Huawei(Android 10). What device have you actually got there?

This is a LG G8 (Android 10), but most versions of Android seem to have it. Maybe check your System Apps?

https://developer.android.com/reference/android/app/DownloadManager

 

[puppykickr]

A history of downloads could be bad for security for anyone.

That is a real problem with FireFox.
They claim to be all about security, then keep records of what you do.

Ask the Netherlands about how keeping records can bite you in the ass.

My browsers don't keep such records, and I wouldn't use one that did.

As for your downloading, why not use a superior app like IDM+ instead?

It is an excellent downloader with a version of the best browser available.

 

[fakewooder]

A history of downloads could be bad for security for anyone.

That is a real problem with FireFox.
They claim to be all about security, then keep records of what you do.

Ask the Netherlands about how keeping records can bite you in the ass.

My browsers don't keep such records, and I wouldn't use one that did.

As for your downloading, why not use a superior app like IDM+ instead?

It is an excellent downloader with a version of the best browser available.

Are you saying 1DM *doesn't* keep a history of downloaded files? It certainly looks like they do. Seems to be pretty basic functionality, potential security concerns aside.

Firefox works with external downloaders (you have to enable the option in settings). My favorites are Download All Files (MDJ), and TDM (Point Blank). I've been using them for 10+ years, so maybe I'm biased.

But Yahoo's mail app doesn't allow external downloaders anyway, so you're stuck with Android's built-in one.

 

[puppykickr]

It is easy enough to prevent it from collecting any history, as it will clear all that when you close the browser- if you set it to do so.

As far as a dedicated download history, I have yet to find it.

It will keep track of failed downloads, so that you can retry them- but those are easy to find and retry.

And I don't know what you mean by 'Yahoo's mail app doesn't allow external downloaders' because I don't use Yahoo and if I did, I would most likely use my browser to access it- and my browser, being IDM+, would most likely be able to download from there that way.

I have found extrenely little that cannot be downloaded with IDM+.

I used to have 5 different downloaders, not including the stock one, and IDM+ replaced all of them.

To be fair, I have disabled my stock Downloads app before, because it had no records of downloads once I began using IDM+.
After a long while, I had some things not wanting to download- can't remember exactly what.

I enabled the stock downloader app and the problem was solved.

It still does very little, however.

 

[fakewooder]

It is easy enough to prevent it from collecting any history, as it will clear all that when you close the browser- if you set it to do so.

As far as a dedicated download history, I have yet to find it.

It will keep track of failed downloads, so that you can retry them- but those are easy to find and retry.

And I don't know what you mean by 'Yahoo's mail app doesn't allow external downloaders' because I don't use Yahoo and if I did, I would most likely use my browser to access it- and my browser, being IDM+, would most likely be able to download from there that way.

I have found extrenely little that cannot be downloaded with IDM+.

I used to have 5 different downloaders, not including the stock one, and IDM+ replaced all of them.

To be fair, I have disabled my stock Downloads app before, because it had no records of downloads once I began using IDM+.
After a long while, I had some things not wanting to download- can't remember exactly what.

I enabled the stock downloader app and the problem was solved.

It still does very little, however.

Firefox will also clear download history (as well as lots of other history, depending on what you select) on close. They're not as bad as you seem to think!



I like them because they're open source, and security bugs are constantly being identified and patched.

*********

Yahoo's mail app is just their dedicated email client. Same as Gmail.

https://play.google.com/store/apps/details?id=com.yahoo.mobile.client.android.mail

You can access from any browser, of course, but the app is a bit smoother than html.

 

[puppykickr]

FireFox buries the download history behind about 3 different menus, right?

Not very forthcoming- almost like they are trying to hide that they do it.

And the people that run it don't like the First Amendment very much, so there is that as well.

Oh, and then there is the fact that FireFox is slower than molassas in Alaska when compared to the browsers that I use.

IDM+ uses a modded version of Lightning, which is an open source wrapper app for Android System Webview- which is installed on every Android device.

FireFox has its own webview, which is dumb since there is already one on the device that all the other apps make use of.

Look at the apk size difference, and then try Lightning and you tell me if it isn't hands down faster than Firefox.
Look through the settings.
So simple, that it is elegant in its simplicity.

https://f-droid.org/en/packages/acr.browser.lightning/

This is the original.
There are many other apps that use it as a base and add other options (like dark mode, etc.).

I am using one for AndroidForums called Midori.

I use Lightning at my work, to look up things for the vehicles we work on.
These two have specific sites saved as the home pages, and so basically work as apps for those sites- with the added benefits of bookmarks and the ability to do web searches.

IDM+ is my general browser.

If you play with any if them, you will see that you can have unlimited tabs and unlimited bookmarks, ad-blocking, and various security settings.

 

[fakewooder]

FireFox buries the download history behind about 3 different menus, right?

Not very forthcoming- almost like they are trying to hide that they do it.

And the people that run it don't like the First Amendment very much, so there is that as well.

Oh, and then there is the fact that FireFox is slower than molassas in Alaska when compared to the browsers that I use.

IDM+ uses a modded version of Lightning, which is an open source wrapper app for Android System Webview- which is installed on every Android device.

FireFox has its own webview, which is dumb since there is already one on the device that all the other apps make use of.

Look at the apk size difference, and then try Lightning and you tell me if it isn't hands down faster than Firefox.
Look through the settings.
So simple, that it is elegant in its simplicity.

https://f-droid.org/en/packages/acr.browser.lightning/

This is the original.
There are many other apps that use it as a base and add other options (like dark mode, etc.).

I am using one for AndroidForums called Midori.

I use Lightning at my work, to look up things for the vehicles we work on.
These two have specific sites saved as the home pages, and so basically work as apps for those sites- with the added benefits of bookmarks and the ability to do web searches.

IDM+ is my general browser.

If you play with any if them, you will see that you can have unlimited tabs and unlimited bookmarks, ad-blocking, and various security settings.

The First Amendment issues are a problem. Maybe I'll take a look.

 

[puppykickr]

https://tatumreport.com/cleansing-f...isnt-enough-wants-shield-internet-bad-actors/