These almost always contain trojans or miners. Legitimate transition files are never .exe — they are .tpd , .ezp , .png , .mov (alpha), or .avi .
