I recently discovered an Android apk that packed an entire nodejs proxy framework (which turns your device into a connection point for paying customers) into an included .so file. I found it interesting as I’ve never seen an application hide files this way.
Not necessarily malicious.