I found some malware linked to the Arceus X Neo 1.2.6 source (Their most recent version)

ARCEUS X IS MALWARE AND YOU SHOULD NEVER TRUST IT. DON'T DOWNLOAD ARCEUS X.

Arceus X had a malware called "libtrampoline.so" also known as Trampoline is a virus planted inside the Arceus X Neo 1.2.0 apk file.

I converted the Arceus X Neo .apk file into a .zip file and this is how i got into finding malware. First, i installed VMBox, then i found the Arceus X site, downloaded the .apk file and converted into a .zip file, while i also got WinRar.

Full video on Reddit

---

Lucky enough i don't use an Android emulator for that one, we will get into it.

I entered the Arceus X Neo .zip file to find some hidden clue on that one. The most concerning ones are:

• Roblox Arceus X Neo 1.2.6.zip > Assets
• Roblox Arceus X Neo 1.2.6.zip > lib

Now for the files... we got... Number One! supplierconfig.json! Hmm... Let's find out... and... it's a .json file.

{
 "supplier":{
             "vivo":{
             "appid":"100215079
            },
             "xiaomi"{
               },
        "huawei"{
            },
    "oppo"{
       }
    }
}

This is the entire code!

It is supposed to be the tech specs for Arceus X Neo, i guess.

 

The rest of the files are:

supplierconfig.json, realtime_features.json, realtime.tflite, main.1.com.roblox.client.obb, fingerprint.txt, cacert.pem, avaible_features.json and avaible.tfelite.

---

Let's try to uncover "fingerprint.txt"

4f22d59c0cec5ee059be2ea14a057850

This is the fingerprinting data. Not much known.

---

Here are the .lib files, for example: 

• libArceusX.so
• libtrampoline.so
• libbacktrace-native.so
• libbarhopper_v2.so
• libcrashpad_handler.so
• libimage_processing_util_ini.so,
• libminimalloc.so
• libroblox.so
• librvcapture_camera.so
• libyuv_shared.so

Only one of the many .so files are classified as "malware", "risky" or "moderate" so don't ever install Arceus X.

---

And that's it!

And don't install Arceus X, ever again!