AvarionX Security

Android malware protection without ads, tracking, or locked core features.

AvarionX combines local malware scanning, optional hash-based cloud intelligence, download monitoring, DNS filtering, APK analysis, and Guardian Mode for ransomware-style behaviour detection.

What is AvarionX?

AvarionX Security is an Android antivirus built around user privacy.

It can scan files and APKs directly on your device, monitor new downloads, check known malicious domains, and use optional cloud intelligence for hash lookups. The app does not use ads, analytics, or paid protection tiers.

Cloud checks are optional. When enabled, AvarionX sends file hashes for lookup, not the file contents.

Protection layers

The Engine's Architecture

AvarionX Antivirus (CS Security) operates through a multi-layered detection pipeline powered by VX-Titanium.

1. Cloud Hash Layer: A fast check on an extremely large historical and current corpus of over 200 million unique malware hashes
2. Hash Layer: Comparing both SHA256 and MD5 fingerprints against known malware lists
3. Signature Layer: Custom byte signitures checked against apk containers, dex and native libraries.
4. Heuristic Layer: Machine learning based behaviour analysis for APKs
5. SIM (similarity engine): A custom algorithm tht calculates the similarity of an uknown file to known malware families.

Machine Learning (ML+)

AvarionX Security includes a dual ML system named ML+

• Legacy MUniverse Tag: Suspicious applications that meet the scoring system's requirements are dubbed with a MUniverse (Malware Universe) tag in app versions 4.0.8x and below
• Current versions use an upgraded heuristics model, with the tag: Andr/VXgen2

Guardian Mode

By utilizing shizuku, Guardian Mode can monitor app behaviour that android would normally keep out of reach. When an app starts changing files, AvarionX monitors it, assessing the likelihood on destructive behaviour. Guardian Mode is currently focused on ransomware-style behaviour. More behaviour categories will be added in future updates.

Screenshots

Home screen

Features list

Scanning mode

APK Analyser

Scanning mode

APK Analyser

Settings Screen

Privacy model

AvarionX is designed to avoid unnecessary data collection.

• No advertisements
• No tracking or analytics
• No HTTPS traffic decryption
• No content inspection
• No file uploads for cloud checks (unless 'Share Malicious APKs' is turned on)
• Hash-only cloud lookups when VTTI is enabled
• Local scanning works offline

What can AvarionX detect?

Whilst AvarionX can detect thousands of families, it is best at known families within VTTI. These can be explored at: MalDex

Guardian Mode Demo

Update 4.1.8

going to be the last update for a while

• Scan speeds have been improved by 50%
• Added a new scan mode; Folder scan
• Replaced the older hash cloud mode with Molecule™, a more advanced cloud engine
• Fixed MetaPass (metapassword not saving)
• Fixed APK Analyser
• Added the ability to clear flagged apps in Quarantine
• Improved the UI
• Minor security patches (6e8142e3644fe0eadb359f10006d5c3c68531d10) (793205b421e1456b1991fe9b1445c6754dc6d434)

To keep up with the latest updates, join our discord server: