Technical Analysis & Behavior
Package Analysis for 'com.sprint.ms.cnap' (Carrier / Recommended Debloat Target): Caller ID cnap = Caller Name Presentation ( Lets you change the name that is displayed on caller ID when making a call. Strange is it the same thing than "com.sprint.ecid" ? Android users frequently spot 'com.sprint.ms.cnap' running persistently in Battery Usage, Network Data Monitor, or Developer Running Services. Note: Malicious trojans and stalkerware APKs also frequently spoof legitimate Carrier system package names like 'com.sprint.ms.cnap' to evade manual detection.