{"package_name":"com.samsung.android.knox.zt.framework","label":"KnoxZT Framework","device_count":37,"observation_count":52,"user_facing_count":0,"first_seen":"2025-06-02T16:53:54Z","last_seen":"2026-09-18T01:54:07Z","guidance":{"summary":"Labelled \"KnoxZT Framework\" on the device, this is a Samsung Knox component of around 20 MB, signed by a Samsung OEM key that also signs the Android framework, and it has no launcher icon. The name matches Samsung's Knox Zero Trust Framework, the enterprise feature set Samsung documents under its Knox mobile security whitepaper; Samsung's documentation does not name this package, so that mapping is inferred here from the package name and label rather than taken from a Samsung statement.\n\nSamsung describes the Knox Zero Trust Framework as requiring an EMM or UEM and as building on Android 14 to provide advanced security capabilities. Its documented parts include the Knox Security Log, an on-device database held in an isolated Linux domain outside the main operating system and reachable only through the Knox framework, which gathers security signals for threat detection with privacy filters applied to redact sensitive user data, and Knox Suspicious URL Detection, which uses on-device machine learning to spot phishing links. Samsung documents the Knox Security Log as available only for fully managed company-owned devices enrolled in Knox Asset Intelligence, and documents Knox Suspicious URL Detection as enabled and configured for devices using Knox Asset Intelligence as part of Knox Security Logs, so those capabilities are realised through that service rather than on a standalone device.\n\nFor Android Enterprise, EMM and kiosk deployments this is enterprise security telemetry rather than bloatware. If you use Knox Asset Intelligence or a UEM that consumes Knox security signals, disabling this component risks silently removing the detection you are paying for, so treat it as caution. On a device with no EMM and no Knox Asset Intelligence subscription there should be less for it to do, but Samsung does not document what it does in that state, so do not assume it is inert.\n\nVersion note: Samsung ties the framework to Android 14 and states that the Knox Security Log is supported on devices running Android 15 or later, so what this component contributes depends on the Android version of the device. Samsung's page does not name the Knox or One UI release that introduced the framework, and on this site the package is recorded only with target SDKs 34 to 36 (Android 14 to 16), which is consistent with a recent addition but is not a substitute for a documented introduction date.","safe_to_disable":"caution","sources":[{"title":"Knox Zero Trust Framework - Samsung Knox mobile security whitepaper, Samsung Knox Documentation","url":"https://docs.samsungknox.com/admin/fundamentals/whitepaper/samsung-knox-mobile-security/system-security/knox-zero-trust-framework/"},{"title":"Zero Trust - Samsung Knox mobile security whitepaper, Samsung Knox Documentation","url":"https://docs.samsungknox.com/admin/fundamentals/whitepaper/samsung-knox-mobile-security/security-principles/zero-trust/"},{"title":"Package provenance for com.samsung.android.knox.zt.framework - Android System App Database","url":"https://sysapps.bayton.org/api/packages/com.samsung.android.knox.zt.framework"}],"last_verified":"2026-09-04T00:00:00Z"},"labels":[{"label":"KnoxZT Framework","locale":"en","count":20},{"label":"KnoxZT Framework","locale":"en-gb","count":18},{"label":"KnoxZT Framework","locale":"en-us","count":17},{"label":"KnoxZT Framework","locale":"it-IT","count":5},{"label":"KnoxZT Framework","locale":"nl-nl","count":4},{"label":"KnoxZT Framework","locale":"en-nl","count":3},{"label":"KnoxZT Framework","locale":"de-de","count":2},{"label":"KnoxZT Framework","locale":"en-GB","count":2},{"label":"KnoxZT Framework","locale":"es-ES","count":2},{"label":"KnoxZT Framework","locale":"es-es","count":2},{"label":"KnoxZT Framework","locale":"it-it","count":2},{"label":"KnoxZT Framework","locale":"ru-ru","count":1},{"label":"KnoxZT Framework","locale":"en-au","count":1},{"label":"KnoxZT Framework","locale":"pl-PL","count":1},{"label":"KnoxZT Framework","locale":"pl-pl","count":1},{"label":"KnoxZT Framework","locale":"fr-fr","count":1}],"seen_on":[{"device_id":45,"make":"samsung","model":"SM-A135F","os_api":"34","observation_count":3,"user_facing_count":0,"last_seen":"2026-01-21T21:26:08Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":292,"make":"samsung","model":"SM-A137F","os_api":"34","observation_count":1,"user_facing_count":0,"last_seen":"2026-01-17T15:40:39Z"},{"device_id":101,"make":"samsung","model":"SM-A236B","os_api":"34","observation_count":2,"user_facing_count":0,"last_seen":"2026-04-10T09:18:27Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":130,"make":"samsung","model":"SM-A266B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-08-21T17:33:39Z"},{"device_id":297,"make":"samsung","model":"SM-A266B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-01-26T12:37:53Z"},{"device_id":3914,"make":"samsung","model":"SM-A346B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2026-07-27T19:03:49Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":57,"make":"samsung","model":"SM-A536B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-19T09:46:41Z"},{"device_id":4345,"make":"samsung","model":"SM-A536B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-07-29T10:09:51Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":76,"make":"samsung","model":"SM-A556B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-01T07:26:00Z"},{"device_id":197,"make":"samsung","model":"SM-A566B","os_api":"36","observation_count":3,"user_facing_count":0,"last_seen":"2026-09-12T23:27:15Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":94,"make":"samsung","model":"SM-F721B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-09T14:36:33Z"},{"device_id":220,"make":"samsung","model":"SM-F766B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-11-11T17:28:28Z"},{"device_id":7287,"make":"samsung","model":"SM-F971B","os_api":"37","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-18T01:54:07Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":205,"make":"samsung","model":"SM-G766B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-10-17T16:37:16Z"},{"device_id":266,"make":"samsung","model":"SM-G766B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-05T16:15:15Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":298,"make":"samsung","model":"SM-G991B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2026-04-19T09:09:11Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":120,"make":"samsung","model":"SM-S721U","os_api":"35","observation_count":5,"user_facing_count":0,"last_seen":"2025-08-05T02:05:06Z"},{"device_id":5178,"make":"samsung","model":"SM-S731B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-08-11T18:01:56Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":34,"make":"samsung","model":"SM-S906B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-02T16:53:54Z"},{"device_id":356,"make":"samsung","model":"SM-S908U","os_api":"36","observation_count":2,"user_facing_count":0,"last_seen":"2026-09-17T20:09:48Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":99,"make":"samsung","model":"SM-S921B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-07-22T13:41:51Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":347,"make":"samsung","model":"SM-S921B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-17T22:25:10Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":59,"make":"samsung","model":"SM-S921U","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-19T18:23:52Z"},{"device_id":339,"make":"samsung","model":"SM-S926B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-04-14T05:11:37Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":295,"make":"samsung","model":"SM-S928B","os_api":"36","observation_count":2,"user_facing_count":0,"last_seen":"2026-06-12T13:09:24Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":177,"make":"samsung","model":"SM-S928U1","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-12T23:04:16Z"},{"device_id":189,"make":"samsung","model":"SM-S931B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-20T01:00:10Z"},{"device_id":228,"make":"samsung","model":"SM-S931B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-11-23T23:24:14Z"},{"device_id":271,"make":"samsung","model":"SM-S936B","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-12-18T15:12:58Z"},{"device_id":153,"make":"samsung","model":"SM-S937B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-08-25T10:38:30Z"},{"device_id":104,"make":"samsung","model":"SM-S938B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-08-25T19:09:54Z"},{"device_id":353,"make":"samsung","model":"SM-S942B","os_api":"37","observation_count":1,"user_facing_count":0,"last_seen":"2026-05-25T09:51:12Z","provenance":{"classification":"oem","vendor":"Samsung","sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42"}},{"device_id":6978,"make":"samsung","model":"SM-S948U","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-09-09T03:01:22Z"},{"device_id":186,"make":"samsung","model":"SM-T636B","os_api":"35","observation_count":2,"user_facing_count":0,"last_seen":"2025-10-12T11:07:44Z"},{"device_id":69,"make":"samsung","model":"SM-X716B","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-27T04:07:47Z"},{"device_id":68,"make":"samsung","model":"SM-X910","os_api":"34","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-26T12:38:49Z"},{"device_id":176,"make":"samsung","model":"SM-X910","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-12T19:22:07Z"}],"intelligence":{"device_profiles":18,"signer_count":1,"signer_consistent":true,"max_permission_count":16,"min_size_bytes":19779812,"max_size_bytes":22655484,"min_target_sdk":34,"max_target_sdk":36,"oldest_version":"1.0.00.22","newest_version":"1.4.00.23","has_third_party_preinstall":false,"genuine_third_party":false,"play_eligible_count":0,"signers":[{"sha256":"34df0e7a9f1cf1892e45c056b4973cd81ccf148a4050d11aea4ac5a65f900a42","classification":"oem","vendor":"Samsung","observation_count":30,"makes":["samsung"],"signs_framework":true,"global_make_count":1,"global_package_count":508,"global_observation_count":10196}],"permissions":[{"permission":"android.permission.CAMERA","description":"This app can take pictures and record videos using the camera while the app is in use.","official":true},{"permission":"android.permission.INTERACT_ACROSS_USERS","description":"Signature or privileged system permission.","official":false},{"permission":"android.permission.MANAGE_EXTERNAL_STORAGE","description":"Signature-level system permission, for platform-signed apps.","official":false,"doc":{"title":"Manage all files access","url":"https://developer.android.com/training/data-storage/manage-all-files"}},{"permission":"android.permission.MANAGE_USERS","description":"Signature or privileged system permission.","official":false},{"permission":"android.permission.NETWORK_SETTINGS","description":"Signature-level system permission, for platform-signed apps.","official":false},{"permission":"android.permission.POST_NOTIFICATIONS","description":"Allows the app to show notifications","official":true},{"permission":"android.permission.SCHEDULE_EXACT_ALARM","description":"This app can schedule work to happen at a desired time in the future. This also means that the app can run when you\\u2019re not actively using the device.","official":true},{"permission":"android.permission.WAKE_LOCK","description":"Allows the app to prevent the phone from going to sleep.","official":true},{"permission":"android.permission.WRITE_SETTINGS","description":"Allows the app to modify the system's settings data. Malicious apps may corrupt your system's configuration.","official":true},{"permission":"com.samsung.android.kfbp.BIND_SERVICE","official":false},{"permission":"com.samsung.android.knox.permission.KNOX_ANALYTICS_INTERNAL","official":false},{"permission":"com.samsung.android.knox.permission.KNOX_PROTECTED_KEYSTORE","official":false},{"permission":"com.samsung.android.knox.permission.SECURE_LOG_ACCESS_PROVIDER","official":false},{"permission":"com.samsung.android.knox.zt.framework.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION","official":false},{"permission":"com.samsung.android.knox.zt.permission.ACCESS_PROVIDER","official":false},{"permission":"com.samsung.android.security.permission.SAMSUNG_KEYSTORE_PERMISSION","official":false}]}}