com.sec.epdgtestapp Copy

Labelled "EpdgTestApp", this package's label and name point towards a testing role connected to the ePDG, but that is as far as the evidence goes: Samsung publishes no documentation for it, so its exact purpose, and its relationship to com.sec.epdg above, are not sourceable. It is Samsung-signed, has no launcher entry on any observation recorded here, and is small, between roughly 174 KB and 425 KB across the builds in our sample. Its permission identifiers place it in the same neighbourhood as the two packages above: a VoWiFi provisioning identifier naming com.samsung.android.unifiedwfc, identifiers naming com.sec.imsservice, the same com.sec.epdg.PERMISSION identifier that appears on com.sec.epdg, read and write identifiers naming the iwlansettings and mapcon providers, and com.sec.phone.permission.SEC_FACTORY_PHONE. Those are shared names in the observed permission lists rather than proof of ownership or of a runtime relationship. What screens or test functions it actually exposes is not sourceable, and this note does not guess at them. A safe-to-disable rating is deliberately omitted for the same reason: nothing reviewed establishes what depends on it. For Android Enterprise, EMM and kiosk work, treat it the way this site treats Samsung's other engineering and service-mode surfaces. The practical control is the app allowlist, keeping components like this out of a kiosk unless they are genuinely needed, and then testing the finished build by actively trying to escape it. That is a more reliable control than package removal, and it does not depend on knowing what an undocumented test app can do. Version note: as with com.sec.epdg, the version string follows the Android major release, running from 12 to 17 in our sample, with Samsung's Common Criteria mode application lists recording 9 on Android 9-era Galaxy S10+ firmware and 11 on Android 11-era Galaxy S20 FE firmware. The minimum target SDK observed here is 29, so some builds are noticeably older than the platform they run on. No source reviewed indicates the package has been superseded, replaced or default-disabled at any Android release.

• Galaxy S10+ LTE (G975F) application list - Samsung Knox CC Mode documentation →
• Galaxy S20 FE 5G (G781B) application list - Samsung Knox CC Mode documentation →
• VoWiFi Security: An Exploration of Non-3GPP Untrusted Access via Public ePDG URLs (ITASEC 2024) →
• How do I prevent users from escaping kiosk (lock task) mode? - Jason Bayton →
• Package provenance for com.sec.epdgtestapp - Android System App Database →

• Signed by the device maker's own signing key (Samsung), so it is an OEM preinstall, but 2 different certificates appear across the fleet, so OEMs ship their own builds of it. It also signs the Android framework, so it is a platform-level key on its device(s). Inferred from the certificate appearing only on Samsung devices (508 packages, 10196 observations).
• Its largest observed manifest declares 22 permissions: 1 runtime (user-granted), 5 signature or system-level, 3 install-time and 13 vendor or uncatalogued.
• Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.