Technical Analysis & Behavior
Package Analysis for 'com.qualcomm.qti.uceshimservice' (Misc / Advanced Debloat Target): UCE shim service UCE = User Capability Exchange. A shim is basically a compatibility layer for an API, that makes sure anything that uses the API does so correctly. Used for RCS. Provides a discovery service for users to see the capabilities of other users. UCE is based on SIP PUBLISH and SIP SUBSCRIBE/NOTIFY. Devices PUBLISH their capabilities to a presence server, when another device wants to find out what the other party supports, the device sends a SUBSCRIBE to the presence server which then returns a NOTIFY of what the other party supports. Android users frequently spot 'com.qualcomm.qti.uceshimservice' running persistently in Battery Usage, Network Data Monitor, or Developer Running Services. Note: Malicious trojans and stalkerware APKs also frequently spoof legitimate Misc system package names like 'com.qualcomm.qti.uceshimservice' to evade manual detection.