New S21 phone has hundreds of apps dated 12/31/2008

[Android Central Question]

I have a new S21 plus. Actually, received the phone from my insurance company so its refurbished \ new. My old phone got hacked and when I set up new phone I wanted to do my best to make sure there was no link between my new phone/google account and old phone. I even had Verizon destroy my online account in case it was compromised and registered again. When I setup new phone I took precautions, I went to a friend’s house and used my work laptop with encrypted hot spot over Vpn from my work laptop and setup google / Verizon accounts and activated my new phone/sim. My experience getting hacked was very unpleasant and still is. I have worked in IT for over 20 years and typically operate with precaution which made it even more unsettling.

After phone was activated I installed file manager +, malware bytes and VPN. After installing malaware bytes I ran a full system scan that came up clean. However as I was poking around I noticed 85% of the system apps had 12/31/2008 as date modified. I had just over 460 apps, which seemed like a lot for a clean install, but I didn’t understand why 85% of those apps had a 12/31/2008 as date modified. Some apps had 7/13/2021 date but most were 12/31/2008 and as I looked at my app permissions found the apps dated 12/31/2008 had full control over my phone. I opened file manger + and looked at the system directory, now I am not going to pretend I am a software developer, I am not that smart. But I am somewhat familiar with Linux file system and the folder structure layout with all the folders dated 12/31/2008 just didn’t sit right. I have received phones in past from insurance company and have had no issues.

If there are any developers or folks in the know that could speak to this. If its expected or normal behavior I will leave it at that, but if its not I can post some screen shots I took so you can see what I am referring to.

 

[mustang7757]

Did you use any type of restore , cloud ,smart switch?

I'll leave a Link to register so you can communicate here as a guest account you can only post questions but can't reply

https://forums.androidcentral.com/showthread.php?t=409154

 

[nix76]

I did not do any restores. Used new Google account that was just created. I didn't download anything or plug my phone into any devices. Only used my Hotspot for internet no other networks.

See attached pics... would be interested in what someone with android development experience would say. Thanks, appreciate feedback

 

[nix76]

Few more pics

 

[mustang7757]

So you received this as refurbished from your insurance , those dates for software updates doesnt make sense and carrier files for 2008 the phone is fairly new to the market , something definitely not right

You use a VPN wonder if that's throwing dates off , is that the stock file manager ? Go to settings>general management>date and time is automatic? How old your sim card?

 

[nix76]

Few more pics

 

[mustang7757]

Few more pics

Those were good enough , thank you , just need little more info from you ?

 

[nix76]

Agree its bizarre... you are correct. Asurion sent me this phone via claim. This is what I saw after firt activated it.. I have brand new sim card from verizon that was activated when I set up this phone. I do use VPN, however I took these prior to configuring VPN.

All my app permissions are set to these apps dates 12/31/2008 and there are multiple versions of systems apps, I have 3 or 4 versions of android setup, but the 2008 dated version has full permissions.

Its not the stock file manager.. using file manager plus I downloaded from play store, I downloaded another file manager and it shows same thing. Malawarebytes is what initially tipped me off, the scan showed me all my system apps with date modified.

 

[mustang7757]

Agree its bizarre... you are correct. Asurion sent me this phone via claim. This is what I saw after firt activated it.. I have brand new sim card from verizon that was activated when I set up this phone. I do use VPN, however I took these prior to configuring VPN.

All my app permissions are set to these apps dates 12/31/2008 and there are multiple versions of systems apps, I have 3 or 4 versions of android setup, but the 2008 dated version has full permissions.

Its not the stock file manager.. using file manager plus I downloaded from play store, I downloaded another file manager and it shows same thing. Malawarebytes is what initially tipped me off, the scan showed me all my system apps with date modified.

What about stock file manager ? It says same ?

 

[nix76]

No, stock file manager appears is not showing hidden system files even though I have it enabled. As if a policy or rule is over riding..very odd

 

[mustang7757]

No, stock file manager appears is not showing hidden system files even though I have it enabled. As if a policy or rule is over riding..very odd

Yeah strange , i wouldn't worry too much into it , a factory reset should all back to normal if you want do that .

 

[Ben xfg]

No, stock file manager appears is not showing hidden system files even though I have it enabled. As if a policy or rule is over riding..very odd

Yeah, some file managers don't show hidden files. From the screenshots it looks as if an OS was extracted and dumped into internal memory. I'm guessing it's a refurb and someone didn't flash it properly, resulting in all these leftover files.
Factory reset should take good care of it.