Hidden apps on Xiaomi smartphones are not always malware. Most often, the manufacturer masks system utilities, service programs or pre-installed services that are not intended for everyday use. However, among them, you can find really suspicious elements: ad modules, spyware utilities or remnants of remote programs. In this article, we will understand how to detect hidden applications on Xiaomi without root rights, using standard tools and advanced methods.
Feature of firmware MIUI (Even in the latest versions of HyperOS, it's about aggressively optimizing background processes and actively using sleep mode for applications, which often leads to users not seeing some programs on the menu or installed list, but there's another side to the coin: Some apps are deliberately hidden, such as Google system services that shouldnβt be available for removal, or malware masquerading as harmless names.
Before we start searching, itβs important to understand that not all hidden apps can (and should) be removed, some of which are critical to the smooth operation of a smartphone, and our job is to learn how to distinguish system components from potentially dangerous or unnecessary ones.
1. Verification through Xiaomi's standard settings
Let's start with the simplest method, which doesn't require any additional software or special knowledge. MIUI/HyperOS There are built-in tools to view all installed apps, including those that donβt appear in the main menu.
Open Settings β Applications β Application Management. Here you will see three tabs:
- π± Installed β All user programs;
- π§ System β pre-installed utilities (including hidden ones);
- π All of them, combined list.
Go to the Systems tab and scroll down. Notice apps with unusual names, like:
- π οΈ com.miui.analytics β statistics collection service;
- π com.xiaomi.midrop β wireless file transfer service;
- π com.miui.cleanmaster β system optimizer.
If the name of the app is suspicious, click on it and examine the permissions.
- π Geolocations;
- π· Camera/microphone;
- π SMS/calls;
- πΎ Files and media.
β οΈ Note: Do not disable system services called com.android. or com.qualcomm. - these are critical components of Android, without which the smartphone can stop working correctly.
2.Use of "Developer Mode" for in-depth analysis
If standard settings arenβt enough, turn on developer mode, which will open up access to advanced diagnostic tools, including a list of background processes and active services.
To activate the mode:
- Go to Settings. β The phone;
- Press 7 times in a row on the item Version MIUI;
- Return to the main settings β a new section for developers will appear.
Now open the Settings. β For developers β Services. Here you'll see all active processes, including those that aren't displayed in the standard application manager:
- π Services with high battery consumption;
- π‘οΈ Processes with suspicious names (e.g. random set of letters);
- π‘ Unknown network connections.
For more detailed analysis, go to Settings β For developers β Process statistics. You can sort applications by:
- π Working hours in the background;
- π Battery consumption;
- π₯ Traffic utilization.
Active Services in Settings β For developers β Services
Statistics of battery consumption processes
List of applications with access to geolocation (Settings) β Confidentiality β Permits β geodata)
Unknown processes in adb shell ps -A (if you use ADB)-->
3. Search through ADB-teams (without root)
If you are ready for more technical methods, Android Debug Bridge (ADB) It can help you identify all the packages installed, including those hidden, which doesn't require root rights, but it requires you to connect your smartphone to your computer.
First, prepare the tools:
- Download Platform Tools from the official Android website;
- Enable debugging by USB in the developer settings;
- Connect your smartphone to your PC and confirm your trust in the device.
Open the command line (or the terminal) Mac/Linux) and do it:
adb shell pm list packages -fThis command will display a complete list of all packets with paths to their.apk files. To find suspicious applications, filter the output:
adb shell pm list packages | grep -i "suspicious_keyword"Replace. suspicious_keyword by part of the name (e.g. spy, track, ad).
To view information about a specific package, use:
adb shell dumpsys package com.example.appβ οΈ Note: Do not delete packages with the names com.android., com.google. or com.qualcomm.* ADB β This can cause the system to fail. For secure removal, use pm hide instead of pm uninstall.
How to return a remote system application?
4. Analysis through third-party applications
If you work with ADB It's a little bit complicated, and you can use specialized tools that scan the system for hidden or potentially dangerous applications, and they can also show them how active they are.
Recommended programmes:
| Annex | Functions | Features |
|---|---|---|
| App Inspector | Shows all packages, including system | No rooting, but some features are limited |
| Hidden App Detector | Scanning for the presence of masked applications | Looking for programs hidden from the standard launcher |
| VirusTotal | Checking. APK virus-like | You can download a suspicious file for analysis. |
| SD Maid | Remove Remnants of Remote Applications | Helps clean up the system of "junk" |
Example of work with App Inspector:
- Install the application from Google Play;
- Run the scan;
- Go to the System Applications tab;
- Sort the list by installation date or size.
Pay attention to the applications:
- π Recent installation date (if you have not installed them);
- π With an empty or suspicious description;
- π¦ Large size, but unknown purpose.
π‘
Before installing third-party antiviruses, check their reputation on forums. 4PDA or XDA Developers: Some cleaners themselves run advertising modules or collect data.
5. Manually checking folders through the file manager
Some hidden applications leave traces in the file system, and to find them, you will need a file manager with access to system folders (for example, MiXplorer or Solid Explorer with root access enabled, if any).
Open the manager and follow the path:
/data/app/
/system/priv-app/
/system/app/Look for folders with unusual names or dates of change.
- π Folders with random alphanumeric names (for example, com.a.b.c123);
- π Files with a recent creation date (unless you have installed anything new);
- π.Apk files outside of standard folders.
If you find a suspicious.apk, you can:
- Copy it onto a computer;
- Download to VirusTotal for verification;
- Delete (if it is safe) or block it via pm hide.
β οΈ Attention: Delete files from folders /system/ or /vendor/ root-free can cause a smartphone to crash. If you don't have a backup, it's better to limit yourself to analysis rather than deletion.
6. Checking network activity
Hidden applications often present themselves as unusual network traffic, such as sending data to unknown servers or consuming traffic in the background, to track this:
Open the Settings. β SIM-maps and mobile networks β Traffic usage can be seen here:
- π Total traffic consumption by application;
- π‘ Background consumption;
- π Server addresses to which programs are connected.
For more detailed analysis, use applications like NetGuard or PCAPdroid (requires root for full functionality).
- π All active connections;
- π‘ IP-Addresses and domains to which applications are accessed;
- π€ Volume of data sent/received.
If you notice suspicious activity (e.g., the com.example.unknown app sends data to a server in China), check it through VirusTotal or block network access in settings.
π‘
Even legitimate Xiaomi system applications (e.g. com.miui.analytics) can send data to the manufacturerβs servers. If this is a concern, disable statistics collection in Settings. β Confidentiality β Analytics MIUI.
7 What to do if you find a suspicious application?
If you find a hidden app that is suspicious, proceed carefully:
- Check the package information: Developer name; Installation date; Permissions.
- Block it: Disable it in settings (Settings) β Annexes β Select an application β Disable; Disable network access and notifications; Limit background activity.
Remove (if it is safe)
- For user applications: standard removal;
- For system: use adb shell pm uninstall -k --user 0 com.example.app (without root);
- Root is required to remove system packages completely.
If an application is critical to the system but is suspicious (e.g., sending too much data), you can:
- π Revoke permits manually;
- π« Freeze with App Quarantine or Shelter;
- π Remove updates (if it is a system application).
In extreme cases, reset to factory settings, but remember: this will delete all data from the device.