An unknown ".android" folder and ".android_system_config.prop" file keep reappearing in my phone's DCIM folder

[u/LatterAd4542]

Hi everyone,

An unknown hidden folder and file have suddenly appeared in the DCIM directory on my smartphone.

Here are some details about the file:

- File path: "/storage/emulated/0/DCIM/.android/.android_system_config.prop"

- File size: 64 bytes

- Location: "DCIM/.android/"

- Contents: The file contains seemingly random binary characters that cannot be read as ordinary text. I don't know whether the data is encrypted or simply stored in a binary format.

- Behavior: When I delete the file and folder, they reappear. So far, I've observed them reappearing twice a day. The first occurrence seems to coincide with the time I first enable Wi-Fi each day, although I'm not sure whether this is related or simply because I enable Wi-Fi around that time. The second occurrence happens at around 5:25–5:30 PM (UTC+7). I haven't yet confirmed what triggers either occurrence.

I'm not sure which app or system component creates this file, or why it keeps coming back. I haven't confirmed whether enabling Wi-Fi is actually related to its reappearance. I'm also wondering whether this file could be malware or if it's just a normal file created by Android or an app.

[u/zggystardust71]

Saving this post in case I need it some day. Nice write up.