Path: ...!news.mixmin.net!aioe.org!kcG5n1GZ52o91a3Gi3s8vA.user.gioia.aioe.org.POSTED!not-for-mail
From: Your Name <YourName@YourISP.com>
Newsgroups: comp.sys.mac.system
Subject: Re: Suspect folder (hex characters in name) in /Library/Application Support
Date: Thu, 10 Jun 2021 17:49:35 +1200
Organization: Aioe.org NNTP Server
Lines: 41
Message-ID: <s9s95e$1at7$1@gioia.aioe.org>
References: <s9rv0c$br8$1@dont-email.me>
NNTP-Posting-Host: kcG5n1GZ52o91a3Gi3s8vA.user.gioia.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
X-Complaints-To: abuse@aioe.org
User-Agent: Unison/2.2
X-Notice: Filtered by postfilter v. 0.9.2
Bytes: 2180

On 2021-06-10 02:56:12 +0000, gtr said:
> On 2021-06-09 19:14:45 +0000, JF Mezei said:
> 
>> Found a odd folder in /Library/Application Support.
>> 
>> each .dat file contains gibberish (no readable text).
>> Some files from 2020:
>> April 30,
>> May 18
>> August 25
>> 
>> But one from:
>> May 27 2021
>> 
>> Any chance these would be legit (fearing some license files for Adobe
>> products that are stored in non obviosu places) or are these nefarous
>> and should be deleted?
>> 
>> (I wish there were a feature like on VMS where you could set an alarm
>> whenever a file is accessed so I could know when and more importantly
>> which process opens to read or write such a file).
<snip>

There are apps like FSMonitor which will tell you when a file is created.



> Get info on some of these provides no useful info?  I have come to love 
> Houdahspot for digging through my world.
> 
> I might look at "all files created" on Aug 25 to see if I could find a 
> correlation.

There's a lot of strange named files and folders within the two Library 
folders, especially deep inside various sub-folders. You'll never find 
out what they belong to. You can thank MacOS X being based on Unix for 
that (there were strangley named files and folders even in the 
"Classic" MacOS System Folder, but nowhere near as many or so 
widespread).