Technical Analysis & Behavior
Package Analysis for 'com.sec.enterprise.knox.cloudmdm.smdms' (Oem / Recommended Debloat Target): Knox Enrollment Service mdm = mobile device management = software used by an IT department to monitor employees' mobile devices. Used to enroll/register a large number of phones to the KNOX MDM service FYI : Android users frequently spot 'com.sec.enterprise.knox.cloudmdm.smdms' running persistently in Battery Usage, Network Data Monitor, or Developer Running Services. Note: Malicious trojans and stalkerware APKs also frequently spoof legitimate Oem system package names like 'com.sec.enterprise.knox.cloudmdm.smdms' to evade manual detection.