65 of 66 engines see nothing malicious. Only BitDefenderFalx flagged it, calling it Android.Riskware.Repack.rJIKW.
That specific label is the key detail: "Repack" is not a malware family — it's the category antivirus engines use specifically to say "this APK's signature doesn't match the original developer's, so it's been unofficially unpacked and re-signed." VirusTotal's own classification confirms this:
Popular threat label:pua.repack/rjikw — PUA means "Potentially Unwanted Application," a much lower-severity bucket than trojan/spyware/ransomware
Threat categories:pua only — no trojan, spyware, or ransomware category assigned
Family labels:repack — again, describing the packaging, not a payload
This is exactly consistent with what I found in the static analysis: the file is genuine PES 2021 content that's been re-signed with a new, non-Konami certificate and had one native library (libpesmasterbridge.so, the "offline server" patch) added. One vendor's heuristic engine is essentially just noting "this isn't signed by the original developer" — which is true and which we already knew — rather than detecting malicious behavior.
On the other tags:
checks-cpu-name, checks-network-adapters — common in games for anti-cheat/anti-emulator or environment checks; also common in legitimate anti-fraud SDKs (Adjust, which this app bundles, does device fingerprinting for attribution)
reflection, contains-elf — normal for any app bundling native code and SDKs like Firebase/Google Play Services
obfuscated — typical for commercial game code (UE4 native binaries are often stripped/obfuscated by default)
telephony — likely a permission/API check by one of the ad-attribution SDKs; not something I saw evidence of being abused in the code
Overall assessment: This isn't Konami's official, Play Store-distributed build — it's a re-signed repack with an added offline-server patch, most likely from a game-preservation project working around Konami's server shutdown for this title. But across both my static analysis and this VirusTotal scan, there's no indication of actual malicious payload (data theft, backdoor, dropper behavior, etc.). The one flag is about provenance, not behavior.
I first install the APK , then I open it . Ofc it will crash black screen you close the game. Go to settings/apps/PES21/Permissions and u give folders or files permissions as allowed. Then u go to the zip obb file u extract it with Zarchiver and u copy the two files inside the folder that was extracted they are both obb files u copy them u go to Android/Obb/com.millionaire.game2026 and inside this folder u paste those two files ( u should be able too see the process while files are pasted ) then open the game it should be able to launch it worked two times this way for me. Remember to give the permissions to files correctly and if it crashes again , do again the files copy paste to android obb. Just try it this way.
Yes it works, but after the title screen there's a pop up window said pes21 won't run without Google play service which aren't supported by your device.
Any solution for this? I'm using Huawei matepad
No. The pop window showed up in title screen right after I finished chose the language and region. Moreover, it's an offline game, there's no option to sign in with Google play. I think the apk package itself contain something related to Google play service. Idk
You should move that biiig large file, to the "obb" file (obb file is in "android" file)
If it still doesn't work you go to settings, apps , pes, permission, and you give it permission for files
I am one of your biggest fans bro can you make this game an xapk? So we don't have to move Obb file because it is difficult to move the file on newer androids
Hello! I need some help, please. I installed the game correctly, and the OBB files are in the right folder. However, I keep getting this error when I start the game: C_ETRH_1000 (Network Error). Could you please tell me how to fix it? Thank you very much for your hard work!
Man thanks I appreciate your work but can you fix the team spirit and players levels because all the players are on level 30 again thanks for your work
I hope you add a commentary loading feature so the game doesn't become boring without commentary, and that you readjust the player development levels because the maximum level for all of them is only 30.
Hey man, I figured out how to boost performance in PES 21 and get rid of the lag some people are experiencing. I discovered that if you release players and keep only 25 in the squad, the game stops stuttering. My suggestion is to try tweaking the game files to limit the squad size to 25; that way, the game won't lag, since having too many players in the squad is what causes the stuttering.
IMPORTANT ⚠️⚠️⚠️ SEND TO MESSAGE TO RELIC 👇🏻👇🏻 👇🏻 🙏🏻
Hi Relic, how are you? A YouTuber named Augustinho Play found a line of code in your PES 2021 Mobile mod related to difficulty; he implemented it in PES 2018 Mobile and it worked—the game became much more challenging, proving that your difficulty code actually works. He also noticed that this same line of code in your PES 2021 Mobile mod is set to level 3, making the CPU very easy to play against. We in the community earnestly ask you to change this difficulty setting to level 7 so that matches against the CPU become more challenging. I’ll leave a screenshot of the line of code you need to change.
Line of code that needs to be changed 👇🏻👇🏻
"cpu_level": CPU_LV3",
For that my friend u will need Shizuku, to enable developer options and then enable wireless debugging and connect it to Shizuku to start its service , then it roots and u can acess the files . I did that and there was nothing to look for only id and names .
24
u/yeet247p Aug 05 '26
65 of 66 engines see nothing malicious. Only BitDefenderFalx flagged it, calling it
Android.Riskware.Repack.rJIKW.That specific label is the key detail: "Repack" is not a malware family — it's the category antivirus engines use specifically to say "this APK's signature doesn't match the original developer's, so it's been unofficially unpacked and re-signed." VirusTotal's own classification confirms this:
pua.repack/rjikw— PUA means "Potentially Unwanted Application," a much lower-severity bucket than trojan/spyware/ransomwarepuaonly — no trojan, spyware, or ransomware category assignedrepack— again, describing the packaging, not a payloadThis is exactly consistent with what I found in the static analysis: the file is genuine PES 2021 content that's been re-signed with a new, non-Konami certificate and had one native library (
libpesmasterbridge.so, the "offline server" patch) added. One vendor's heuristic engine is essentially just noting "this isn't signed by the original developer" — which is true and which we already knew — rather than detecting malicious behavior.On the other tags:
checks-cpu-name,checks-network-adapters— common in games for anti-cheat/anti-emulator or environment checks; also common in legitimate anti-fraud SDKs (Adjust, which this app bundles, does device fingerprinting for attribution)reflection,contains-elf— normal for any app bundling native code and SDKs like Firebase/Google Play Servicesobfuscated— typical for commercial game code (UE4 native binaries are often stripped/obfuscated by default)telephony— likely a permission/API check by one of the ad-attribution SDKs; not something I saw evidence of being abused in the codeOverall assessment: This isn't Konami's official, Play Store-distributed build — it's a re-signed repack with an added offline-server patch, most likely from a game-preservation project working around Konami's server shutdown for this title. But across both my static analysis and this VirusTotal scan, there's no indication of actual malicious payload (data theft, backdoor, dropper behavior, etc.). The one flag is about provenance, not behavior.
-Claude
VirusTotal gives it a clean chit.
Thank you for doing this for the community!