Technical Analysis & Behavior
Package Analysis for 'com.android.mms' (Aosp / Recommended Debloat Target): AOSP SMS app. Occasionally runs in the background. Some OEMs (like Huawei & Xiaomi) use the same package name for their app. QKSMS is a good FOSS replacement: Android users frequently spot 'com.android.mms' running persistently in Battery Usage, Network Data Monitor, or Developer Running Services. Note: Malicious trojans and stalkerware APKs also frequently spoof legitimate Aosp system package names like 'com.android.mms' to evade manual detection.