Two apps called 'Work profile' with name 'android.uid.knoxcore:5250' on Samsung device

Max780780

New member
Oct 5, 2022
1
0
0
I was looking through my system apps and it appears that there are two apps called 'Work profile' (note the odd lack of capitals). They have full permissions, permissions to change settings and have remove permissions after not being used for a while off. I have scanned my device multiple times over many periods with various antimalware software (and Samsung's own pre-installed software) but there were no threats found.

I have found an APK on ApkMirror also called 'Work profile' by Samsung Electronics Co., Ltd with the same version number but I'm not convinced.

They are very suspicious. Does anyone know what they could be? I cannot delete them through settings, Malwarebytes or App Managers.
 

Attachments

  • Screenshot_20221005_173417.jpg
    Screenshot_20221005_173417.jpg
    83.7 KB · Views: 5
Last edited:
It is exactly that: required services for Work Profiles to work. It's all part of Knox's services/security routines. Bear in mind that those processes may be active whether or not you actually use them, like Secure Folder or Work Profiles.
 
Welcome to Android Central! I just wonder why you think this is suspicious, when everything points to it being a normal system app. I don't think the capitalization issue indicates anything -- these are engineers we're talking about, not English majors.;)