That app showing Knox just means ive hidden Knox reporting to your system. You've still tripped Knox if you check download mode.
The encryption disabler is linked in the Instructions for TWRP. It's not mine, and it's separate.
And yes flash the kernel that matches your device and firmware.
Edit. Simply try and use Samsung pay or secure folder, and that will prove if Knox is tripped or not