{"package_name":"com.tencent.soter.soterserver","label":"SoterService","device_count":17,"observation_count":18,"user_facing_count":0,"first_seen":"2025-05-22T18:36:34Z","last_seen":"2026-08-24T06:38:23Z","guidance":{"summary":"This is the device-side service for TENCENT SOTER, which Tencent's own open-source repository describes as \"a biometric standard as well as a platform held by Tencent\", used in scenarios such as WeChat fingerprint payment and fingerprint authentication in WeChat Official Account pages and Mini Programs. Tencent's README tells app developers integrating the SOTER SDK to declare a package query for com.tencent.soter.soterserver in their manifest. In that repository's client SDK, the SoterCoreTreble class binds to a service in this package (intent action com.tencent.soter.soterserver.ISoterService, package com.tencent.soter.soterserver), and the ISoterService AIDL interface it binds to exposes operations to generate, export and remove app and authentication keys, sign a challenge, and return a device identifier and version. So the package is the on-device end of an interface that Tencent's SDK calls; the SDK source does not say how each device maker implements the service.\n\nOn this site it is recorded across several makes (DOOGEE, HOTWAV, Lenovo, OPPO, OUKITEL, Xiaomi, fezawio and realme) on devices reporting OS API levels 30 to 36. Where this site holds signer data, which is 3 of those 8 makes (Xiaomi, OUKITEL and OPPO), it is signed by that maker's own OEM key, and on some of those observations the key also signs the Android framework, a platform-level key. Its recorded labels include \"SoterService\", \"soter_server\" and \"aidlserverdemo\", and this site records it requesting only INTERNET, QUERY_ALL_PACKAGES and RECEIVE_BOOT_COMPLETED. This site aggregates permissions across observations rather than per build, so which builds declare each of them cannot be established.\n\nVersion note: Tencent's SDK has two routes. SoterCore first looks for a SOTER security provider registered in the device's Java security providers (the SoterCoreBeforeTreble class) and separately offers a route that binds to this package (the SoterCoreTreble class). The class names suggest the service-based route is the one intended for devices built after Project Treble, but the cited source does not tie either route to a specific Android version, so which route a given device uses could not be sourced. Tencent's README records Android 9 support and Huawei device support being added in SDK version 2.0.\n\nFor Android Enterprise, EMM and kiosk use it has no enrolment or policy role identified in the sources cited here. Its relevance is to apps that use SOTER, notably WeChat's fingerprint payment as described by Tencent. If it is the service Tencent's SDK binds to, disabling it would be expected to stop the service-based route working for such apps on that device; the effect on any given app was not verified here. Where WeChat payment or another SOTER-based app is not in use, the Android Management API's application policy documents a \"disabled\" field for an app, noting that app data is preserved when it is set; test on a representative device first.","sources":[{"title":"Tencent/soter README - GitHub","url":"https://github.com/Tencent/soter/blob/3d62bfef32160b1dae25c7ccc7519482dfb9f86f/README.md"},{"title":"SoterCoreTreble.java - Tencent/soter client SDK, GitHub","url":"https://github.com/Tencent/soter/blob/3d62bfef32160b1dae25c7ccc7519482dfb9f86f/soter-client-sdk/soter-core/src/main/java/com/tencent/soter/core/sotercore/SoterCoreTreble.java"},{"title":"SoterCore.java - Tencent/soter client SDK, GitHub","url":"https://github.com/Tencent/soter/blob/3d62bfef32160b1dae25c7ccc7519482dfb9f86f/soter-client-sdk/soter-core/src/main/java/com/tencent/soter/core/SoterCore.java"},{"title":"ISoterService.aidl - Tencent/soter client SDK, GitHub","url":"https://github.com/Tencent/soter/blob/3d62bfef32160b1dae25c7ccc7519482dfb9f86f/soter-client-sdk/soter-core/src/main/aidl/com/tencent/soter/soterserver/ISoterService.aidl"},{"title":"Policy resource (ApplicationPolicy) - Android Management API","url":"https://developers.google.com/android/management/reference/rest/v1/enterprises.policies"},{"title":"Package provenance for com.tencent.soter.soterserver - Android System App Database","url":"https://sysapps.bayton.org/api/packages/com.tencent.soter.soterserver"}],"last_verified":"2026-10-14T00:00:00Z"},"labels":[{"label":"soter_server","locale":"en-us","count":4},{"label":"SoterService","locale":"en-gb","count":2},{"label":"SoterService","locale":"vi-VN","count":2},{"label":"SoterService","locale":"vi-vn","count":2},{"label":"SoterService","locale":"en","count":1},{"label":"SoterService","locale":"en-in","count":1},{"label":"SoterService","locale":"es-US","count":1},{"label":"SoterService","locale":"es-es","count":1},{"label":"SoterService","locale":"es-us","count":1},{"label":"SoterService","locale":"ru-ru","count":1},{"label":"aidlserverdemo","locale":"","count":1},{"label":"aidlserverdemo","locale":"en-lk","count":1},{"label":"aidlserverdemo","locale":"en-us","count":1},{"label":"aidlserverdemo","locale":"es-MX","count":1},{"label":"aidlserverdemo","locale":"es-mx","count":1},{"label":"soter_server","locale":"en","count":1},{"label":"soter_server","locale":"it-it","count":1},{"label":"soter_server","locale":"ja-jp","count":1}],"seen_on_pagination":{"paging_mode":"complete","limit":17,"offset":0,"has_more":false,"next_offset":null,"after":null,"next_after":null,"total":17},"seen_on":[{"device_id":172,"make":"DOOGEE","model":"S41 Max","os_api":"33","observation_count":2,"user_facing_count":0,"last_seen":"2025-10-03T12:01:00Z"},{"device_id":3435,"make":"fezawio","model":"F11_V_US","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2026-07-14T19:53:47Z"},{"device_id":185,"make":"HOTWAV","model":"TAB R9 Pro","os_api":"34","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-18T12:19:10Z"},{"device_id":50,"make":"LENOVO","model":"TB570FU","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-17T00:02:58Z"},{"device_id":96,"make":"OPPO","model":"CPH2591","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-10T09:11:23Z"},{"device_id":301,"make":"OPPO","model":"CPH2637","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2026-02-02T19:10:20Z","provenance":{"classification":"oem","vendor":"OPPO","sha256":"fc98dae63ad39626c8c67fbe83f2f06f74932a9cd146b92cecfc6a047a904386"}},{"device_id":215,"make":"OUKITEL","model":"C59 Pro","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-11-06T07:50:16Z"},{"device_id":363,"make":"OUKITEL","model":"WP28 E","os_api":"34","observation_count":1,"user_facing_count":0,"last_seen":"2026-08-24T06:38:23Z","provenance":{"classification":"oem","vendor":"OUKITEL","sha256":"40a9831caed40b2e6f72afb723c37f20c63de468c12699b32a1bb4ff738c2498"}},{"device_id":148,"make":"realme","model":"RMX2001","os_api":"30","observation_count":1,"user_facing_count":0,"last_seen":"2025-08-21T05:31:41Z"},{"device_id":171,"make":"Xiaomi","model":"21091116UI","os_api":"33","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-08T16:34:28Z"},{"device_id":307,"make":"Xiaomi","model":"220333QNY","os_api":"33","observation_count":1,"user_facing_count":0,"last_seen":"2026-02-16T09:16:12Z","provenance":{"classification":"oem","vendor":"Xiaomi","sha256":"d45f076fe23a1a5b7f486e3ff41547a2023dbfe1fe73353b1e48ebdfed72cc6f"}},{"device_id":32,"make":"Xiaomi","model":"23106RN0DA","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-05-22T18:36:34Z"},{"device_id":53,"make":"Xiaomi","model":"23124RA7EO","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-17T14:24:51Z"},{"device_id":279,"make":"Xiaomi","model":"24117RN76O","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-12-28T15:32:14Z","provenance":{"classification":"oem","vendor":"Xiaomi","sha256":"c9009d01ebf9f5d0302bc71b2fe9aa9a47a432bba17308a3111b75d7b2149025"}},{"device_id":323,"make":"Xiaomi","model":"24117RN76O","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-03-20T13:27:25Z","provenance":{"classification":"oem","vendor":"Xiaomi","sha256":"c9009d01ebf9f5d0302bc71b2fe9aa9a47a432bba17308a3111b75d7b2149025"}},{"device_id":195,"make":"Xiaomi","model":"M2012K11AG","os_api":"33","observation_count":1,"user_facing_count":0,"last_seen":"2025-10-01T12:09:57Z"},{"device_id":317,"make":"Xiaomi","model":"M2101K6G","os_api":"33","observation_count":1,"user_facing_count":0,"last_seen":"2026-03-08T07:45:49Z","provenance":{"classification":"oem","vendor":"Xiaomi","sha256":"d45f076fe23a1a5b7f486e3ff41547a2023dbfe1fe73353b1e48ebdfed72cc6f"}}],"intelligence":{"insights":["Re-signed by each device maker with its own platform key - 4 different certificates appear across 3 device makers in our sample. That is the signature of a stock AOSP/system package every OEM builds and signs itself, not a single maker's or a third party's preinstall. These are platform-level keys: they also sign the Android framework itself.","Its largest observed manifest declares 3 permissions: 3 install-time.","APK size ranges from 0.0 MB to 5.9 MB across the reporting device profiles, so the build differs substantially between them.","Never reported as user-facing, so it runs as a background or system component rather than an app the user opens."],"device_profiles":6,"signer_count":4,"signer_consistent":false,"max_permission_count":3,"min_size_bytes":29086,"max_size_bytes":6165319,"min_target_sdk":32,"max_target_sdk":35,"oldest_version":"2.6.0","newest_version":"2.0.250811","has_third_party_preinstall":false,"genuine_third_party":false,"play_eligible_count":0,"signers":[{"sha256":"c9009d01ebf9f5d0302bc71b2fe9aa9a47a432bba17308a3111b75d7b2149025","classification":"oem","vendor":"Xiaomi","observation_count":2,"makes":["Xiaomi"],"signs_framework":true,"global_make_count":1,"global_package_count":322,"global_observation_count":860},{"sha256":"d45f076fe23a1a5b7f486e3ff41547a2023dbfe1fe73353b1e48ebdfed72cc6f","classification":"oem","vendor":"Xiaomi","observation_count":2,"makes":["Xiaomi"],"signs_framework":false,"global_make_count":1,"global_package_count":68,"global_observation_count":196},{"sha256":"40a9831caed40b2e6f72afb723c37f20c63de468c12699b32a1bb4ff738c2498","classification":"oem","vendor":"OUKITEL","observation_count":1,"makes":["OUKITEL"],"signs_framework":true,"global_make_count":1,"global_package_count":85,"global_observation_count":85},{"sha256":"fc98dae63ad39626c8c67fbe83f2f06f74932a9cd146b92cecfc6a047a904386","classification":"oem","vendor":"OPPO","observation_count":1,"makes":["OPPO"],"signs_framework":true,"global_make_count":1,"global_package_count":181,"global_observation_count":181}],"permissions":[{"permission":"android.permission.INTERNET","description":"Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.","official":true},{"permission":"android.permission.QUERY_ALL_PACKAGES","description":"Allows an app to see all installed packages.","official":true},{"permission":"android.permission.RECEIVE_BOOT_COMPLETED","description":"Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.","official":true}]},"previews":{"labels":{"kind":"preview","limit":60,"total":18,"truncated":false,"collection_url":"/api/packages/com.tencent.soter.soterserver/labels"}},"collections":{"labels":"/api/packages/com.tencent.soter.soterserver/labels","seen_on":"/api/packages/com.tencent.soter.soterserver/seen_on"}}