[2025-08-22 00:00:10][357962505933713][1 ms][INFO] === Request start === [2025-08-22 00:00:10][357962505933713][2 ms][DEBUG] START check_frida [2025-08-22 00:00:10][357962505933713][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll" [2025-08-22 00:00:10][357962505933713][304 ms][DEBUG] SU: done in 301 ms; outroot 16270 1 2295852 4444 poll_schedule_timeout 0 S frida-server\n [2025-08-22 00:00:10][357962505933713][304 ms][DEBUG] check_frida: running [2025-08-22 00:00:10][357962505933713][304 ms][DEBUG] END check_frida in 302 ms [2025-08-22 00:00:10][357962505933713][305 ms][DEBUG] START check_internet [2025-08-22 00:00:10][357962505933713][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 00:00:11][357962505933713][787 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.204/202.204/202.204/0.000 ms\n [2025-08-22 00:00:11][357962505933713][787 ms][DEBUG] check_internet: online [2025-08-22 00:00:11][357962505933713][788 ms][DEBUG] END check_internet in 483 ms [2025-08-22 00:00:11][357962505933713][788 ms][DEBUG] START check_scloud [2025-08-22 00:00:11][357962505933713][788 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] SU: done in 265 ms; outu0_a118 16385 4994 23681680 79248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] targetPkg: running [2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] END check_scloud in 265 ms [2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] rawBody.length=1161 [2025-08-22 00:00:11][357962505933713][1053 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA1OTMzNzEzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDlTRlFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NSJ9'" -e "main()" -q" [2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:00:11][357962505933713][1053 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU3OTYyNTA1OTMzNzEzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDlTRlFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NSJ9'" -e "main()" -q" [2025-08-22 00:00:14][357962505933713][3724 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU3OTYyNTA1OTMzNzEzIiwibW9kZWwiOiJTTS1FMTM1RiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJaOFc3MDlTRlFZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJJTlMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDNjI0NSJ9"\r\n [2025-08-22 00:00:16][357962505933713][5786 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f757060c-6949-4829-8fb0-5da93dc27ad2","id":"QR_f757060c-6949-4829-8fb0-5da93dc27ad2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:00:16][357962505933713][5786 ms][DEBUG] proc_open done in 4733 ms; code=0; res.len=3152 [2025-08-22 00:00:16][357962505933713][5786 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-08-22 00:00:16][357962505933713][5786 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:03:07][351652533532134][1 ms][INFO] === Request start === [2025-08-22 00:03:07][351652533532134][2 ms][DEBUG] START check_frida [2025-08-22 00:03:07][351652533532134][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll" [2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] SU: done in 310 ms; outroot 16270 1 2294840 4416 poll_schedule_timeout 0 S frida-server\n [2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] check_frida: running [2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] END check_frida in 310 ms [2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] START check_scloud [2025-08-22 00:03:07][351652533532134][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:03:08][351652533532134][624 ms][DEBUG] SU: done in 312 ms; outu0_a118 16385 4994 23681712 78348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:03:08][351652533532134][624 ms][DEBUG] targetPkg: running [2025-08-22 00:03:08][351652533532134][624 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 00:03:08][351652533532134][624 ms][DEBUG] rawBody.length=1160 [2025-08-22 00:03:08][351652533532134][624 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjUyNTMzNTMyMTM0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMzFLQ0hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjEyIn0='" -e "main()" -q" [2025-08-22 00:03:08][351652533532134][625 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:03:08][351652533532134][625 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxNjUyNTMzNTMyMTM0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMzFLQ0hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjEyIn0='" -e "main()" -q" [2025-08-22 00:03:10][351652533532134][3217 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxNjUyNTMzNTMyMTM0IiwibW9kZWwiOiJTTS1BMjU2RSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1gxMzFLQ0hMIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkxUTSIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM2MjEyIn0="\r\n [2025-08-22 00:03:15][351652533532134][7685 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_38696e3a-25b3-47f4-9a1b-11c33801b958","id":"QR_38696e3a-25b3-47f4-9a1b-11c33801b958","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:03:15][351652533532134][7685 ms][DEBUG] proc_open done in 7060 ms; code=0; res.len=3152 [2025-08-22 00:03:15][351652533532134][7685 ms][DEBUG] END runCmdUntilRes#1 in 7060 ms [2025-08-22 00:03:15][351652533532134][7685 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:04:10][352247503078058][0 ms][INFO] === Request start === [2025-08-22 00:04:10][352247503078058][1 ms][DEBUG] START check_frida [2025-08-22 00:04:10][352247503078058][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll" [2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] SU: done in 328 ms; outroot 16270 1 2295852 4448 poll_schedule_timeout 0 S frida-server\n [2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] check_frida: running [2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] END check_frida in 328 ms [2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] START check_internet [2025-08-22 00:04:10][352247503078058][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.045/203.045/203.045/0.000 ms\n [2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] check_internet: online [2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] END check_internet in 562 ms [2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] START check_scloud [2025-08-22 00:04:10][352247503078058][892 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] SU: done in 250 ms; outu0_a118 16385 4994 23681744 78904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] targetPkg: running [2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] rawBody.length=1161 [2025-08-22 00:04:11][352247503078058][1142 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjQ3NTAzMDc4MDU4IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dDMUUwVkhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjcxMiJ9'" -e "main()" -q" [2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:04:11][352247503078058][1142 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUyMjQ3NTAzMDc4MDU4IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dDMUUwVkhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjcxMiJ9'" -e "main()" -q" [2025-08-22 00:04:13][352247503078058][3781 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUyMjQ3NTAzMDc4MDU4IiwibW9kZWwiOiJTTS1TOTI4QiIsInByb2ZpbGVfSUQiOiI2ODdhMGEyOTI2MGNjODE5N2Y2ZjQ0NDQiLCJncm91cCI6IjE4ZjU5N2M4LTA2ZjktNGU0ZS1iZTcwLTI5YmZhODRjM2JkYyIsInR5cGUiOiJLTUUiLCJyZWciOiJldSIsImRldmljZVNlcmlhbE51bWJlciI6IlJGQ1dDMUUwVkhGIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoicmFxdWVsLjFAb25tYWlsLmNvbSIsImNhcnJpZXIiOiJBVFMiLCJvcyI6IjEyIiwia25veFNka1ZlcnNpb24iOiIgS05PWC0zMyIsImRldmljZUlkIjoiU0VDMTA5QzA3OUFDMjcxMiJ9"\r\n [2025-08-22 00:04:16][352247503078058][6109 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c3bf39c3-c17b-4ae1-8a85-e1f2e4e3153f","id":"QR_c3bf39c3-c17b-4ae1-8a85-e1f2e4e3153f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:04:16][352247503078058][6109 ms][DEBUG] proc_open done in 4967 ms; code=0; res.len=3152 [2025-08-22 00:04:16][352247503078058][6109 ms][DEBUG] END runCmdUntilRes#1 in 4967 ms [2025-08-22 00:04:16][352247503078058][6109 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:07:07][355195460736902][1 ms][INFO] === Request start === [2025-08-22 00:07:07][355195460736902][2 ms][DEBUG] START check_frida [2025-08-22 00:07:07][355195460736902][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll" [2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] SU: done in 300 ms; outroot 16270 1 2295852 4412 poll_schedule_timeout 0 S frida-server\n [2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] check_frida: running [2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] END check_frida in 300 ms [2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] START check_scloud [2025-08-22 00:07:08][355195460736902][301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] SU: done in 297 ms; outu0_a118 16385 4994 23681776 78540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] targetPkg: running [2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] rawBody.length=1160 [2025-08-22 00:07:08][355195460736902][599 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1NDYwNzM2OTAyIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxME1KUVJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzY1In0='" -e "main()" -q" [2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:07:08][355195460736902][599 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzU1MTk1NDYwNzM2OTAyIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxME1KUVJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzY1In0='" -e "main()" -q" [2025-08-22 00:07:10][355195460736902][3255 ms][DEBUG] frida res:"eyJpbWVpIjoiMzU1MTk1NDYwNzM2OTAyIiwibW9kZWwiOiJTTS1BMTM1TSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1OFcxME1KUVJZIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkFSTyIsIm9zIjoiMTIiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTMzIiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3NzY1In0="\r\n [2025-08-22 00:07:15][355195460736902][7566 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f26afc6-35e1-4d98-b298-1e5bd23d55d9","id":"QR_7f26afc6-35e1-4d98-b298-1e5bd23d55d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:07:15][355195460736902][7567 ms][DEBUG] proc_open done in 6967 ms; code=0; res.len=3152 [2025-08-22 00:07:15][355195460736902][7567 ms][DEBUG] END runCmdUntilRes#1 in 6968 ms [2025-08-22 00:07:15][355195460736902][7567 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:09:07][351103376224785][0 ms][INFO] === Request start === [2025-08-22 00:09:07][351103376224785][1 ms][DEBUG] START check_frida [2025-08-22 00:09:07][351103376224785][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep frida-server | grep poll" [2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] SU: done in 319 ms; outroot 16270 1 2294840 4356 poll_schedule_timeout 0 S frida-server\n [2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] check_frida: running [2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] END check_frida in 320 ms [2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] START check_scloud [2025-08-22 00:09:07][351103376224785][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] SU: done in 234 ms; outu0_a118 16385 4994 23805452 86692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] targetPkg: running [2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] END check_scloud in 234 ms [2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] rawBody.length=1160 [2025-08-22 00:09:07][351103376224785][555 ms][INFO] FRIDA CMD: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTAzMzc2MjI0Nzg1IiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTgxRldYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNDVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzY4In0='" -e "main()" -q" [2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:09:07][351103376224785][555 ms][DEBUG] proc_open: cmd /C ""C:\Python38\Scripts\frida.exe" -U -n com.sec.enterprise.knox.cloudmdm.smdms -l "C:\Python38\Scripts\z3x\kme.js" -e "globalThis.KME_ARG='eyJpbWVpIjoiMzUxMTAzMzc2MjI0Nzg1IiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTgxRldYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNDVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzY4In0='" -e "main()" -q" [2025-08-22 00:09:10][351103376224785][3195 ms][DEBUG] frida res:"eyJpbWVpIjoiMzUxMTAzMzc2MjI0Nzg1IiwibW9kZWwiOiJTTS1TOTI4VSIsInByb2ZpbGVfSUQiOiI2ODc5NzBmM2Q2Y2Y4NTVmOWRkMzkzYmYiLCJncm91cCI6IjM5NjhlOTIxLTgyMGUtNGNhMS1hNTc5LTI5ZTU5OThlZTdhNSIsInR5cGUiOiJLTUUiLCJyZWciOiJ1cyIsImRldmljZVNlcmlhbE51bWJlciI6IlI1Q1g0MTgxRldYIiwic2NoZW1lIjoiUVJfQ09ERSIsImVtYWlsIjoic3VwQGd1cC4zM21haWwuY29tIiwiY2FycmllciI6IkNDVCIsIm9zIjoiMTMiLCJrbm94U2RrVmVyc2lvbiI6IiBLTk9YLTI4IiwiZGV2aWNlSWQiOiJTRUMxMDlDMDc5QUM3MzY4In0="\r\n [2025-08-22 00:09:14][351103376224785][6867 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_165538e4-f11a-4202-a5ed-03f77938dec5","id":"QR_165538e4-f11a-4202-a5ed-03f77938dec5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:09:14][351103376224785][6867 ms][DEBUG] proc_open done in 6312 ms; code=0; res.len=3152 [2025-08-22 00:09:14][351103376224785][6867 ms][DEBUG] END runCmdUntilRes#1 in 6312 ms [2025-08-22 00:09:14][351103376224785][6867 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:24:07][352288966212982][0 ms][INFO] === Request start === [2025-08-22 00:24:07][352288966212982][0 ms][DEBUG] START check_scloud [2025-08-22 00:24:07][352288966212982][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:24:07][352288966212982][255 ms][DEBUG] SU: done in 255 ms; outu0_a118 21686 4994 23803044 137392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:24:07][352288966212982][256 ms][DEBUG] targetPkg: running [2025-08-22 00:24:07][352288966212982][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-22 00:24:07][352288966212982][256 ms][DEBUG] START check_boot_completed [2025-08-22 00:24:07][352288966212982][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:24:07][352288966212982][287 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 00:24:07][352288966212982][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:24:07][352288966212982][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 00:24:07][352288966212982][334 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 00:24:07][352288966212982][334 ms][DEBUG] START check_internet [2025-08-22 00:24:07][352288966212982][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.414/200.414/200.414/0.000 ms\n [2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] check_internet: online [2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] END check_internet in 500 ms [2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] rawBody.length=1043 [2025-08-22 00:24:08][352288966212982][834 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:24:08][352288966212982][834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 00:24:11][352288966212982][4395 ms][DEBUG] frida res:res:{"id":"68a79ce4a374a659aee6cf79","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a79ce4a374a659aee6cf79","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["308204d4308203bca003020102020900d20995a79c0daad6300d06092a864886f70d01010505003081a2310b3009060355040613024b52311430120603550408130b536f757468204b6f726561311330110603550407130a5375776f6e2043697479311c301a060355040a131353616d73756e6720436f72706f726174696f6e310c300a060355040b1303444d43311530130603550403130c53616d73756e6720436572743125302306092a864886f70d0109011616616e64726f69642e6f734073616d73756e672e636f6d301e170d3131303632323132323531325a170d3338313130373132323531325a3081a2310b3009060355040613024b52311430120603550408130b536f757468204b6f726561311330110603550407130a5375776f6e2043697479311c301a060355040a131353616d73756e6720436f72706f726174696f6e310c300a060355040b1303444d43311530130603550403130c53616d73756e6720436572743125302306092a864886f70d0109011616616e64726f69642e6f734073616d73756e672e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100c986384a3e1f2fb206670e78ef232215c0d26f45a22728db99a44da11c35ac33a71fe071c4a2d6825a9b4c88b333ed96f3c5e6c666d60f3ee94c490885abcf8dc660f707aabc77ead3e2d0d8aee8108c15cd260f2e85042c28d2f292daa3c6da0c7bf2391db7841aade8fdf0c9d0defcf77124e6d2de0a9e0d2da746c3670e4ffcdc85b701bb4744861b96ff7311da3603c5a10336e55ffa34b4353eedc85f51015e1518c67e309e39f87639ff178107f109cd18411a6077f26964b6e63f8a70b9619db04306a323c1a1d23af867e19f14f570ffe573d0e3a0c2b30632aaec3173380994be1e341e3a90bd2e4b615481f46db39ea83816448ec35feb1735c1f3020103a382010b30820107301d0603551d0e04160414932c3af70b627a0c7610b5a0e7427d6cfaea3f1e3081d70603551d230481cf3081cc8014932c3af70b627a0c7610b5a0e7427d6cfaea3f1ea181a8a481a53081a2310b3009060355040613024b52311430120603550408130b536f757468204b6f726561311330110603550407130a5375776f6e2043697479311c301a060355040a131353616d73756e6720436f72706f726174696f6e310c300a060355040b1303444d43311530130603550403130c53616d73756e6720436572743125302306092a864886f70d0109011616616e64726f69642e6f734073616d73756e672e636f6d820900d20995a79c0daad6300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100329601fe40e036a4a86cc5d49dd8c1b5415998e72637538b0d430369ac51530f63aace8c019a1a66616a2f1bb2c5fabd6f313261f380e3471623f053d9e3c53f5fd6d1965d7b000e4dc244c1b27e2fe9a323ff077f52c4675e86247aa801187137e30c9bbf01c567a4299db4bf0b25b7d7107a7b81ee102f72ff47950164e26752e114c42f8b9d2a42e7308897ec640ea1924ed13abbe9d120912b62f4926493a86db94c0b46f44c6161d58c2f648164890c512dfb28d42c855bf470dbee2dab6960cad04e81f71525ded46cdd0f359f99c460db9f007d96ce83b4b218ac2d82c48f12608d469733f05a3375594669ccbf8a495544d6c5701e9369c08c810158"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n [2025-08-22 00:24:12][352288966212982][4551 ms][DEBUG] proc_open done in 3717 ms; code=255; res.len=2939 [2025-08-22 00:24:12][352288966212982][4551 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-22 00:24:12][352288966212982][4552 ms][INFO] SUCCESS response from frida (len=2939) [2025-08-22 00:26:00][352288966212982][0 ms][INFO] === Request start === [2025-08-22 00:26:00][352288966212982][1 ms][DEBUG] START check_scloud [2025-08-22 00:26:00][352288966212982][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 21686 4994 23906504 149328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] targetPkg: running [2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] START check_boot_completed [2025-08-22 00:26:00][352288966212982][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:26:00][352288966212982][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 00:26:00][352288966212982][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:26:00][352288966212982][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 00:26:00][352288966212982][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 00:26:00][352288966212982][412 ms][DEBUG] START check_internet [2025-08-22 00:26:00][352288966212982][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.958/256.958/256.958/0.000 ms\n [2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] check_internet: online [2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] END check_internet in 375 ms [2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] rawBody.length=1043 [2025-08-22 00:26:00][352288966212982][787 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:26:00][352288966212982][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 00:26:04][352288966212982][4552 ms][DEBUG] frida res:res:{"id":"68a79ce4a374a659aee6cf79","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a79ce4a374a659aee6cf79","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["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"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n [2025-08-22 00:26:04][352288966212982][4708 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=2939 [2025-08-22 00:26:04][352288966212982][4708 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-22 00:26:04][352288966212982][4708 ms][INFO] SUCCESS response from frida (len=2939) [2025-08-22 00:29:37][353357977144150][1 ms][INFO] === Request start === [2025-08-22 00:29:37][353357977144150][2 ms][DEBUG] START check_scloud [2025-08-22 00:29:37][353357977144150][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:29:37][353357977144150][293 ms][DEBUG] SU: done in 291 ms; outu0_a118 21686 4994 24065260 160692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:29:37][353357977144150][293 ms][DEBUG] targetPkg: running [2025-08-22 00:29:37][353357977144150][293 ms][DEBUG] END check_scloud in 291 ms [2025-08-22 00:29:37][353357977144150][293 ms][DEBUG] START check_boot_completed [2025-08-22 00:29:37][353357977144150][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:29:37][353357977144150][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 00:29:37][353357977144150][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:29:37][353357977144150][386 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 00:29:37][353357977144150][387 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 00:29:37][353357977144150][387 ms][DEBUG] rawBody.length=1160 [2025-08-22 00:29:37][353357977144150][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977144150\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8XC05AP2V\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9662\"}'\'' -e'"" [2025-08-22 00:29:37][353357977144150][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:29:37][353357977144150][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353357977144150\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8XC05AP2V\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9662\"}'\'' -e'"" [2025-08-22 00:29:45][353357977144150][8650 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b422990a-21c6-4ae4-82fe-0bbd69b2845a","id":"QR_b422990a-21c6-4ae4-82fe-0bbd69b2845a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:29:45][353357977144150][8806 ms][DEBUG] proc_open done in 8419 ms; code=255; res.len=3152 [2025-08-22 00:29:45][353357977144150][8806 ms][DEBUG] END runCmdUntilRes#1 in 8419 ms [2025-08-22 00:29:45][353357977144150][8806 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:30:38][357567918364032][1 ms][INFO] === Request start === [2025-08-22 00:30:38][357567918364032][2 ms][DEBUG] START check_scloud [2025-08-22 00:30:38][357567918364032][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:30:39][357567918364032][279 ms][DEBUG] SU: done in 277 ms; outu0_a118 21686 4994 24222032 171388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:30:39][357567918364032][279 ms][DEBUG] targetPkg: running [2025-08-22 00:30:39][357567918364032][279 ms][DEBUG] END check_scloud in 277 ms [2025-08-22 00:30:39][357567918364032][279 ms][DEBUG] START check_boot_completed [2025-08-22 00:30:39][357567918364032][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:30:39][357567918364032][326 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 00:30:39][357567918364032][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:30:39][357567918364032][388 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 00:30:39][357567918364032][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 00:30:39][357567918364032][388 ms][DEBUG] START check_internet [2025-08-22 00:30:39][357567918364032][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 00:30:39][357567918364032][919 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.957/203.957/203.957/0.000 ms\n [2025-08-22 00:30:39][357567918364032][919 ms][DEBUG] check_internet: online [2025-08-22 00:30:39][357567918364032][919 ms][DEBUG] END check_internet in 531 ms [2025-08-22 00:30:39][357567918364032][919 ms][DEBUG] rawBody.length=1160 [2025-08-22 00:30:39][357567918364032][920 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567918364032\",\"model\":\"SM-A256E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCXB02VM7V\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7960\"}'\'' -e'"" [2025-08-22 00:30:39][357567918364032][920 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:30:39][357567918364032][920 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567918364032\",\"model\":\"SM-A256E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCXB02VM7V\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7960\"}'\'' -e'"" [2025-08-22 00:30:44][357567918364032][6074 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b59da7e-6915-4566-b49f-ac816466c861","id":"QR_8b59da7e-6915-4566-b49f-ac816466c861","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:30:45][357567918364032][6230 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3152 [2025-08-22 00:30:45][357567918364032][6230 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-22 00:30:45][357567918364032][6230 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:37:10][351771923464334][1 ms][INFO] === Request start === [2025-08-22 00:37:10][351771923464334][2 ms][DEBUG] START check_scloud [2025-08-22 00:37:10][351771923464334][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:37:11][351771923464334][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 21686 4994 24338280 183584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:37:11][351771923464334][301 ms][DEBUG] targetPkg: running [2025-08-22 00:37:11][351771923464334][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 00:37:11][351771923464334][301 ms][DEBUG] START check_boot_completed [2025-08-22 00:37:11][351771923464334][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:37:11][351771923464334][330 ms][DEBUG] ADB: done in 29 ms; out [2025-08-22 00:37:11][351771923464334][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:37:11][351771923464334][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 00:37:11][351771923464334][378 ms][DEBUG] END check_boot_completed in 76 ms [2025-08-22 00:37:11][351771923464334][378 ms][DEBUG] rawBody.length=1160 [2025-08-22 00:37:11][351771923464334][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923464334\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXA24CYSW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5435\"}'\'' -e'"" [2025-08-22 00:37:11][351771923464334][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:37:11][351771923464334][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771923464334\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXA24CYSW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5435\"}'\'' -e'"" [2025-08-22 00:37:16][351771923464334][5673 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f95446df-6879-4446-9cab-efd51e55f473","id":"QR_f95446df-6879-4446-9cab-efd51e55f473","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:37:16][351771923464334][5829 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3152 [2025-08-22 00:37:16][351771923464334][5829 ms][DEBUG] END runCmdUntilRes#1 in 5451 ms [2025-08-22 00:37:16][351771923464334][5829 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:45:53][351123901786033][1 ms][INFO] === Request start === [2025-08-22 00:45:53][351123901786033][2 ms][DEBUG] START check_scloud [2025-08-22 00:45:53][351123901786033][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:45:54][351123901786033][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21686 4994 24462412 194672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:45:54][351123901786033][304 ms][DEBUG] targetPkg: running [2025-08-22 00:45:54][351123901786033][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 00:45:54][351123901786033][304 ms][DEBUG] START check_boot_completed [2025-08-22 00:45:54][351123901786033][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:45:54][351123901786033][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 00:45:54][351123901786033][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:45:54][351123901786033][383 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 00:45:54][351123901786033][384 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 00:45:54][351123901786033][384 ms][DEBUG] rawBody.length=1160 [2025-08-22 00:45:54][351123901786033][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901786033\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW313N9KX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7497\"}'\'' -e'"" [2025-08-22 00:45:54][351123901786033][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:45:54][351123901786033][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901786033\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW313N9KX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7497\"}'\'' -e'"" [2025-08-22 00:45:59][351123901786033][5506 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5d4b95d-8119-4872-81b9-5ff959fa8c1d","id":"QR_d5d4b95d-8119-4872-81b9-5ff959fa8c1d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:45:59][351123901786033][5662 ms][DEBUG] proc_open done in 5278 ms; code=255; res.len=3152 [2025-08-22 00:45:59][351123901786033][5662 ms][DEBUG] END runCmdUntilRes#1 in 5279 ms [2025-08-22 00:45:59][351123901786033][5662 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:48:34][351771922563219][1 ms][INFO] === Request start === [2025-08-22 00:48:34][351771922563219][2 ms][DEBUG] START check_scloud [2025-08-22 00:48:34][351771922563219][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:48:34][351771922563219][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 21686 4994 24605052 205620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:48:34][351771922563219][307 ms][DEBUG] targetPkg: running [2025-08-22 00:48:34][351771922563219][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 00:48:34][351771922563219][307 ms][DEBUG] START check_boot_completed [2025-08-22 00:48:34][351771922563219][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:48:34][351771922563219][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 00:48:34][351771922563219][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:48:34][351771922563219][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 00:48:34][351771922563219][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 00:48:34][351771922563219][385 ms][DEBUG] START check_internet [2025-08-22 00:48:34][351771922563219][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 00:48:35][351771922563219][854 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.401/200.401/200.401/0.000 ms\n [2025-08-22 00:48:35][351771922563219][854 ms][DEBUG] check_internet: online [2025-08-22 00:48:35][351771922563219][854 ms][DEBUG] END check_internet in 469 ms [2025-08-22 00:48:35][351771922563219][854 ms][DEBUG] rawBody.length=1161 [2025-08-22 00:48:35][351771922563219][854 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771922563219\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXA0VN7TY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9631\"}'\'' -e'"" [2025-08-22 00:48:35][351771922563219][855 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:48:35][351771922563219][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771922563219\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXA0VN7TY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9631\"}'\'' -e'"" [2025-08-22 00:48:39][351771922563219][4978 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0e5c88e-b38f-4ca9-9f14-91ed8c9e71a6","id":"QR_a0e5c88e-b38f-4ca9-9f14-91ed8c9e71a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:48:39][351771922563219][5134 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 00:48:39][351771922563219][5134 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 00:48:39][351771922563219][5134 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:54:08][351241483945221][1 ms][INFO] === Request start === [2025-08-22 00:54:08][351241483945221][2 ms][DEBUG] START check_scloud [2025-08-22 00:54:08][351241483945221][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:54:09][351241483945221][282 ms][DEBUG] SU: done in 280 ms; outu0_a118 21686 4994 24740476 166468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:54:09][351241483945221][282 ms][DEBUG] targetPkg: running [2025-08-22 00:54:09][351241483945221][282 ms][DEBUG] END check_scloud in 280 ms [2025-08-22 00:54:09][351241483945221][282 ms][DEBUG] START check_boot_completed [2025-08-22 00:54:09][351241483945221][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:54:09][351241483945221][313 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 00:54:09][351241483945221][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:54:09][351241483945221][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 00:54:09][351241483945221][360 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 00:54:09][351241483945221][360 ms][DEBUG] START check_internet [2025-08-22 00:54:09][351241483945221][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 00:54:09][351241483945221][797 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.412/199.412/199.412/0.000 ms\n [2025-08-22 00:54:09][351241483945221][798 ms][DEBUG] check_internet: online [2025-08-22 00:54:09][351241483945221][798 ms][DEBUG] END check_internet in 437 ms [2025-08-22 00:54:09][351241483945221][798 ms][DEBUG] rawBody.length=1161 [2025-08-22 00:54:09][351241483945221][798 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351241483945221\",\"model\":\"SM-A236B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW81D20YF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5320\"}'\'' -e'"" [2025-08-22 00:54:09][351241483945221][798 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:54:09][351241483945221][798 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351241483945221\",\"model\":\"SM-A236B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW81D20YF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5320\"}'\'' -e'"" [2025-08-22 00:54:13][351241483945221][4890 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cce97adf-23b7-488e-b762-4bdb13b61b58","id":"QR_cce97adf-23b7-488e-b762-4bdb13b61b58","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:54:13][351241483945221][5046 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 00:54:13][351241483945221][5046 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-22 00:54:13][351241483945221][5046 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:57:07][354206311072560][1 ms][INFO] === Request start === [2025-08-22 00:57:07][354206311072560][2 ms][DEBUG] START check_scloud [2025-08-22 00:57:07][354206311072560][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:57:07][354206311072560][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 21686 4994 24899300 148144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:57:07][354206311072560][318 ms][DEBUG] targetPkg: running [2025-08-22 00:57:07][354206311072560][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 00:57:07][354206311072560][318 ms][DEBUG] START check_boot_completed [2025-08-22 00:57:07][354206311072560][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:57:07][354206311072560][350 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 00:57:07][354206311072560][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:57:07][354206311072560][398 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 00:57:07][354206311072560][398 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-22 00:57:07][354206311072560][398 ms][DEBUG] rawBody.length=1160 [2025-08-22 00:57:07][354206311072560][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354206311072560\",\"model\":\"SM-S916W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW60B70ZD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1345\"}'\'' -e'"" [2025-08-22 00:57:07][354206311072560][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:57:07][354206311072560][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354206311072560\",\"model\":\"SM-S916W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW60B70ZD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1345\"}'\'' -e'"" [2025-08-22 00:57:13][354206311072560][5801 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e04981c7-08f3-4527-923d-364a3bb1579f","id":"QR_e04981c7-08f3-4527-923d-364a3bb1579f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:57:13][354206311072560][5957 ms][DEBUG] proc_open done in 5559 ms; code=255; res.len=3152 [2025-08-22 00:57:13][354206311072560][5958 ms][DEBUG] END runCmdUntilRes#1 in 5559 ms [2025-08-22 00:57:13][354206311072560][5958 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 00:58:36][355120935537115][0 ms][INFO] === Request start === [2025-08-22 00:58:36][355120935537115][1 ms][DEBUG] START check_scloud [2025-08-22 00:58:36][355120935537115][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 00:58:36][355120935537115][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 21686 4994 25008968 160220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 00:58:36][355120935537115][314 ms][DEBUG] targetPkg: running [2025-08-22 00:58:36][355120935537115][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 00:58:36][355120935537115][314 ms][DEBUG] START check_boot_completed [2025-08-22 00:58:36][355120935537115][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:58:36][355120935537115][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 00:58:36][355120935537115][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:58:36][355120935537115][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 00:58:36][355120935537115][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 00:58:36][355120935537115][424 ms][DEBUG] START check_internet [2025-08-22 00:58:36][355120935537115][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 00:58:37][355120935537115][892 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.565/201.565/201.565/0.000 ms\n [2025-08-22 00:58:37][355120935537115][892 ms][DEBUG] check_internet: online [2025-08-22 00:58:37][355120935537115][892 ms][DEBUG] END check_internet in 469 ms [2025-08-22 00:58:37][355120935537115][892 ms][DEBUG] rawBody.length=1160 [2025-08-22 00:58:37][355120935537115][892 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355120935537115\",\"model\":\"SM-A136U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22FX2ND\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-08-22 00:58:37][355120935537115][893 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 00:58:37][355120935537115][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355120935537115\",\"model\":\"SM-A136U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22FX2ND\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-08-22 00:58:41][355120935537115][5173 ms][DEBUG] proc_open done in 4280 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 00:58:41][355120935537115][5173 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 00:58:41][355120935537115][5173 ms][WARN] Detected error: Process with pid 21686 either refused to load frida-agent, or terminated during injection [2025-08-22 00:58:41][355120935537115][5173 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 00:58:41][355120935537115][5344 ms][DEBUG] SU: done in 171 ms; out [2025-08-22 00:58:41][355120935537115][5344 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 00:58:41][355120935537115][5344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 00:58:41][355120935537115][5469 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 00:58:41][355120935537115][5469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 00:58:42][355120935537115][5705 ms][DEBUG] SU: done in 236 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 00:58:44][355120935537115][7718 ms][DEBUG] START check_boot_completed [2025-08-22 00:58:44][355120935537115][7719 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 00:58:44][355120935537115][7765 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 00:58:44][355120935537115][7765 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 00:58:44][355120935537115][7814 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 00:58:44][355120935537115][7814 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 00:58:47][355120935537115][10827 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 00:58:47][355120935537115][10827 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355120935537115\",\"model\":\"SM-A136U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22FX2ND\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-08-22 00:58:52][355120935537115][15904 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_96dc7bee-ae19-4003-9ba0-dc349e5dff53","id":"QR_96dc7bee-ae19-4003-9ba0-dc349e5dff53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 00:58:52][355120935537115][16060 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3152 [2025-08-22 00:58:52][355120935537115][16060 ms][DEBUG] END runCmdUntilRes#2 in 5233 ms [2025-08-22 00:58:52][355120935537115][16061 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 01:03:23][351007066491028][1 ms][INFO] === Request start === [2025-08-22 01:03:23][351007066491028][1 ms][DEBUG] START check_scloud [2025-08-22 01:03:23][351007066491028][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:03:23][351007066491028][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 25090 4994 23656868 126812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:03:23][351007066491028][309 ms][DEBUG] targetPkg: running [2025-08-22 01:03:23][351007066491028][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-22 01:03:23][351007066491028][310 ms][DEBUG] START check_boot_completed [2025-08-22 01:03:23][351007066491028][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:03:23][351007066491028][339 ms][DEBUG] ADB: done in 30 ms; out [2025-08-22 01:03:23][351007066491028][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:03:23][351007066491028][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 01:03:23][351007066491028][387 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-22 01:03:23][351007066491028][387 ms][DEBUG] rawBody.length=1160 [2025-08-22 01:03:23][351007066491028][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007066491028\",\"model\":\"SM-A356E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX907RGME\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7849\"}'\'' -e'"" [2025-08-22 01:03:23][351007066491028][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:03:23][351007066491028][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007066491028\",\"model\":\"SM-A356E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX907RGME\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7849\"}'\'' -e'"" [2025-08-22 01:03:27][351007066491028][4729 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 01:03:28][351007066491028][4885 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=115 [2025-08-22 01:03:28][351007066491028][4885 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-22 01:03:28][351007066491028][4885 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 01:03:28][][0 ms][INFO] === Request start === [2025-08-22 01:03:28][][1 ms][DEBUG] START check_scloud [2025-08-22 01:03:28][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:03:28][][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 25090 4994 23801196 137812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:03:28][][311 ms][DEBUG] targetPkg: running [2025-08-22 01:03:28][][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 01:03:28][][311 ms][DEBUG] START check_boot_completed [2025-08-22 01:03:28][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:03:28][][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 01:03:28][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:03:28][][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 01:03:28][][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 01:03:28][][404 ms][DEBUG] rawBody.length=1130 [2025-08-22 01:03:28][][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX907RGME\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3008\"}'\'' -e'"" [2025-08-22 01:03:28][][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:03:28][][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX907RGME\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3008\"}'\'' -e'"" [2025-08-22 01:03:32][][4122 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 01:03:32][][4278 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=107 [2025-08-22 01:03:32][][4278 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-22 01:03:32][][4278 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 01:03:33][][0 ms][INFO] === Request start === [2025-08-22 01:03:33][][1 ms][DEBUG] START check_scloud [2025-08-22 01:03:33][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:03:33][][268 ms][DEBUG] SU: done in 267 ms; outu0_a118 25090 4994 23976436 149208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:03:33][][269 ms][DEBUG] targetPkg: running [2025-08-22 01:03:33][][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-22 01:03:33][][269 ms][DEBUG] START check_boot_completed [2025-08-22 01:03:33][][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:03:33][][315 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 01:03:33][][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:03:33][][378 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 01:03:33][][378 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 01:03:33][][378 ms][DEBUG] rawBody.length=1130 [2025-08-22 01:03:33][][378 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX907RGME\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1897\"}'\'' -e'"" [2025-08-22 01:03:33][][378 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:03:33][][378 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A356E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX907RGME\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1897\"}'\'' -e'"" [2025-08-22 01:03:37][][4111 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 01:03:37][][4267 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=107 [2025-08-22 01:03:37][][4267 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-22 01:03:37][][4267 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 01:03:38][351007066491028][1 ms][INFO] === Request start === [2025-08-22 01:03:38][351007066491028][1 ms][DEBUG] START check_scloud [2025-08-22 01:03:38][351007066491028][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:03:38][351007066491028][321 ms][DEBUG] SU: done in 319 ms; outu0_a118 25090 4994 24102524 160072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:03:38][351007066491028][321 ms][DEBUG] targetPkg: running [2025-08-22 01:03:38][351007066491028][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-22 01:03:38][351007066491028][321 ms][DEBUG] START check_boot_completed [2025-08-22 01:03:38][351007066491028][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:03:38][351007066491028][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 01:03:38][351007066491028][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:03:38][351007066491028][430 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 01:03:38][351007066491028][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 01:03:38][351007066491028][430 ms][DEBUG] rawBody.length=1161 [2025-08-22 01:03:38][351007066491028][430 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007066491028\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RXCX907RGME\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2453\"}'\'' -e'"" [2025-08-22 01:03:38][351007066491028][430 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:03:38][351007066491028][430 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007066491028\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RXCX907RGME\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2453\"}'\'' -e'"" [2025-08-22 01:03:47][351007066491028][9334 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d7e7a8e-ced0-44e2-be75-dd55f94afc74","id":"QR_5d7e7a8e-ced0-44e2-be75-dd55f94afc74","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 01:03:47][351007066491028][9491 ms][DEBUG] proc_open done in 9060 ms; code=255; res.len=3152 [2025-08-22 01:03:47][351007066491028][9491 ms][DEBUG] END runCmdUntilRes#1 in 9060 ms [2025-08-22 01:03:47][351007066491028][9491 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 01:04:37][354091573478444][0 ms][INFO] === Request start === [2025-08-22 01:04:37][354091573478444][1 ms][DEBUG] START check_scloud [2025-08-22 01:04:37][354091573478444][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:04:37][354091573478444][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25090 4994 24171060 171276 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:04:37][354091573478444][304 ms][DEBUG] targetPkg: running [2025-08-22 01:04:37][354091573478444][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 01:04:37][354091573478444][304 ms][DEBUG] START check_boot_completed [2025-08-22 01:04:37][354091573478444][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:04:37][354091573478444][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 01:04:37][354091573478444][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:04:37][354091573478444][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 01:04:37][354091573478444][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 01:04:37][354091573478444][397 ms][DEBUG] START check_internet [2025-08-22 01:04:37][354091573478444][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 01:04:38][354091573478444][866 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=192 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 192.087/192.087/192.087/0.000 ms\n [2025-08-22 01:04:38][354091573478444][866 ms][DEBUG] check_internet: online [2025-08-22 01:04:38][354091573478444][866 ms][DEBUG] END check_internet in 469 ms [2025-08-22 01:04:38][354091573478444][866 ms][DEBUG] rawBody.length=1160 [2025-08-22 01:04:38][354091573478444][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573478444\",\"model\":\"SM-M546B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCW9075H3H\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1026\"}'\'' -e'"" [2025-08-22 01:04:38][354091573478444][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:04:38][354091573478444][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354091573478444\",\"model\":\"SM-M546B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCW9075H3H\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1026\"}'\'' -e'"" [2025-08-22 01:04:44][354091573478444][6630 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52b48629-dc11-4b79-b0c6-4b8177fc3583","id":"QR_52b48629-dc11-4b79-b0c6-4b8177fc3583","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 01:04:44][354091573478444][6787 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3152 [2025-08-22 01:04:44][354091573478444][6787 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-08-22 01:04:44][354091573478444][6787 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 01:16:34][352773717183277][1 ms][INFO] === Request start === [2025-08-22 01:16:34][352773717183277][2 ms][DEBUG] START check_scloud [2025-08-22 01:16:34][352773717183277][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:16:34][352773717183277][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 25090 4994 24310476 183528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:16:34][352773717183277][313 ms][DEBUG] targetPkg: running [2025-08-22 01:16:34][352773717183277][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 01:16:34][352773717183277][313 ms][DEBUG] START check_boot_completed [2025-08-22 01:16:34][352773717183277][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:16:34][352773717183277][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 01:16:34][352773717183277][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:16:34][352773717183277][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 01:16:34][352773717183277][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 01:16:34][352773717183277][407 ms][DEBUG] START check_internet [2025-08-22 01:16:34][352773717183277][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 01:16:35][352773717183277][859 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.558/201.558/201.558/0.000 ms\n [2025-08-22 01:16:35][352773717183277][860 ms][DEBUG] check_internet: online [2025-08-22 01:16:35][352773717183277][860 ms][DEBUG] END check_internet in 453 ms [2025-08-22 01:16:35][352773717183277][860 ms][DEBUG] rawBody.length=1161 [2025-08-22 01:16:35][352773717183277][860 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773717183277\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY12PENWW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4427\"}'\'' -e'"" [2025-08-22 01:16:35][352773717183277][860 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:16:35][352773717183277][860 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352773717183277\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY12PENWW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4427\"}'\'' -e'"" [2025-08-22 01:16:39][352773717183277][4999 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a2e1bd07-20e9-4ca3-b404-39c2fedd784a","id":"QR_a2e1bd07-20e9-4ca3-b404-39c2fedd784a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 01:16:39][352773717183277][5155 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3152 [2025-08-22 01:16:39][352773717183277][5155 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-22 01:16:39][352773717183277][5155 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 01:22:22][351184066146751][1 ms][INFO] === Request start === [2025-08-22 01:22:22][351184066146751][2 ms][DEBUG] START check_scloud [2025-08-22 01:22:22][351184066146751][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:22:22][351184066146751][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 25090 4994 24456124 194468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:22:22][351184066146751][315 ms][DEBUG] targetPkg: running [2025-08-22 01:22:22][351184066146751][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 01:22:22][351184066146751][315 ms][DEBUG] START check_boot_completed [2025-08-22 01:22:22][351184066146751][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:22:22][351184066146751][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 01:22:22][351184066146751][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:22:22][351184066146751][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 01:22:22][351184066146751][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 01:22:22][351184066146751][425 ms][DEBUG] START check_internet [2025-08-22 01:22:22][351184066146751][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 01:22:23][351184066146751][956 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.726/202.726/202.726/0.000 ms\n [2025-08-22 01:22:23][351184066146751][956 ms][DEBUG] check_internet: online [2025-08-22 01:22:23][351184066146751][956 ms][DEBUG] END check_internet in 531 ms [2025-08-22 01:22:23][351184066146751][956 ms][DEBUG] rawBody.length=1160 [2025-08-22 01:22:23][351184066146751][956 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184066146751\",\"model\":\"SM-S928U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX61ZDYBJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1623\"}'\'' -e'"" [2025-08-22 01:22:23][351184066146751][956 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:22:23][351184066146751][956 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184066146751\",\"model\":\"SM-S928U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX61ZDYBJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1623\"}'\'' -e'"" [2025-08-22 01:22:30][351184066146751][7844 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09f6c441-860a-4329-af70-3b7671a3e644","id":"QR_09f6c441-860a-4329-af70-3b7671a3e644","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 01:22:30][351184066146751][8001 ms][DEBUG] proc_open done in 7044 ms; code=255; res.len=3152 [2025-08-22 01:22:30][351184066146751][8001 ms][DEBUG] END runCmdUntilRes#1 in 7045 ms [2025-08-22 01:22:30][351184066146751][8001 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 01:26:37][355824558078634][1 ms][INFO] === Request start === [2025-08-22 01:26:37][355824558078634][2 ms][DEBUG] START check_scloud [2025-08-22 01:26:37][355824558078634][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:26:37][355824558078634][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 25090 4994 24584224 205092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:26:37][355824558078634][304 ms][DEBUG] targetPkg: running [2025-08-22 01:26:37][355824558078634][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 01:26:37][355824558078634][304 ms][DEBUG] START check_boot_completed [2025-08-22 01:26:37][355824558078634][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:26:37][355824558078634][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 01:26:37][355824558078634][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:26:37][355824558078634][445 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 01:26:37][355824558078634][445 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 01:26:37][355824558078634][445 ms][DEBUG] START check_internet [2025-08-22 01:26:37][355824558078634][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 01:26:38][355824558078634][929 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.902/203.902/203.902/0.000 ms\n [2025-08-22 01:26:38][355824558078634][929 ms][DEBUG] check_internet: online [2025-08-22 01:26:38][355824558078634][929 ms][DEBUG] END check_internet in 484 ms [2025-08-22 01:26:38][355824558078634][929 ms][DEBUG] rawBody.length=1160 [2025-08-22 01:26:38][355824558078634][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00Q9NJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6470\"}'\'' -e'"" [2025-08-22 01:26:38][355824558078634][929 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:26:38][355824558078634][930 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00Q9NJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6470\"}'\'' -e'"" [2025-08-22 01:26:43][355824558078634][6349 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee23e0f9-d3b7-46e8-bea6-14eba7adf7a9","id":"QR_ee23e0f9-d3b7-46e8-bea6-14eba7adf7a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 01:26:44][355824558078634][6506 ms][DEBUG] proc_open done in 5576 ms; code=255; res.len=3152 [2025-08-22 01:26:44][355824558078634][6506 ms][DEBUG] END runCmdUntilRes#1 in 5576 ms [2025-08-22 01:26:44][355824558078634][6506 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 01:33:07][355814563772818][1 ms][INFO] === Request start === [2025-08-22 01:33:07][355814563772818][2 ms][DEBUG] START check_scloud [2025-08-22 01:33:07][355814563772818][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:33:07][355814563772818][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 25090 4994 24719416 216916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:33:07][355814563772818][307 ms][DEBUG] targetPkg: running [2025-08-22 01:33:07][355814563772818][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 01:33:07][355814563772818][307 ms][DEBUG] START check_boot_completed [2025-08-22 01:33:07][355814563772818][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:33:07][355814563772818][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 01:33:07][355814563772818][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:33:07][355814563772818][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 01:33:07][355814563772818][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 01:33:07][355814563772818][416 ms][DEBUG] rawBody.length=1161 [2025-08-22 01:33:07][355814563772818][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355814563772818\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W202AB9E\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4127\"}'\'' -e'"" [2025-08-22 01:33:07][355814563772818][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:33:07][355814563772818][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355814563772818\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W202AB9E\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4127\"}'\'' -e'"" [2025-08-22 01:33:12][355814563772818][4727 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_617723ce-03d0-4b18-8cae-40f9f42d3400","id":"QR_617723ce-03d0-4b18-8cae-40f9f42d3400","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 01:33:12][355814563772818][4884 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3152 [2025-08-22 01:33:12][355814563772818][4884 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-22 01:33:12][355814563772818][4884 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 01:47:20][353670770673658][1 ms][INFO] === Request start === [2025-08-22 01:47:20][353670770673658][2 ms][DEBUG] START check_scloud [2025-08-22 01:47:20][353670770673658][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:47:20][353670770673658][274 ms][DEBUG] SU: done in 272 ms; outu0_a118 25090 4994 24874268 227720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:47:20][353670770673658][274 ms][DEBUG] targetPkg: running [2025-08-22 01:47:20][353670770673658][274 ms][DEBUG] END check_scloud in 272 ms [2025-08-22 01:47:20][353670770673658][274 ms][DEBUG] START check_boot_completed [2025-08-22 01:47:20][353670770673658][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:47:20][353670770673658][321 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 01:47:20][353670770673658][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:47:21][353670770673658][383 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 01:47:21][353670770673658][383 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 01:47:21][353670770673658][383 ms][DEBUG] rawBody.length=1160 [2025-08-22 01:47:21][353670770673658][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353670770673658\",\"model\":\"SM-A166U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXC0Q7ZTD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8469\"}'\'' -e'"" [2025-08-22 01:47:21][353670770673658][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:47:21][353670770673658][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353670770673658\",\"model\":\"SM-A166U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXC0Q7ZTD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8469\"}'\'' -e'"" [2025-08-22 01:47:26][353670770673658][5569 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_164ba4c3-da56-40e1-9f90-e981b63d6e9a","id":"QR_164ba4c3-da56-40e1-9f90-e981b63d6e9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 01:47:26][353670770673658][5726 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3152 [2025-08-22 01:47:26][353670770673658][5726 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-08-22 01:47:26][353670770673658][5726 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 01:57:19][353607433463846][1 ms][INFO] === Request start === [2025-08-22 01:57:19][353607433463846][2 ms][DEBUG] START check_scloud [2025-08-22 01:57:19][353607433463846][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:57:20][353607433463846][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 25090 4994 25008640 238768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:57:20][353607433463846][304 ms][DEBUG] targetPkg: running [2025-08-22 01:57:20][353607433463846][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 01:57:20][353607433463846][304 ms][DEBUG] START check_boot_completed [2025-08-22 01:57:20][353607433463846][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:57:20][353607433463846][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 01:57:20][353607433463846][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:57:20][353607433463846][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 01:57:20][353607433463846][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 01:57:20][353607433463846][413 ms][DEBUG] rawBody.length=1161 [2025-08-22 01:57:20][353607433463846][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607433463846\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX90PHXMM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5147\"}'\'' -e'"" [2025-08-22 01:57:20][353607433463846][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:57:20][353607433463846][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607433463846\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX90PHXMM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5147\"}'\'' -e'"" [2025-08-22 01:57:24][353607433463846][4240 ms][DEBUG] proc_open done in 3827 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 01:57:24][353607433463846][4240 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-22 01:57:24][353607433463846][4240 ms][WARN] Detected error: Process with pid 25090 either refused to load frida-agent, or terminated during injection [2025-08-22 01:57:24][353607433463846][4240 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 01:57:24][353607433463846][4396 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 01:57:24][353607433463846][4396 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 01:57:24][353607433463846][4397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 01:57:24][353607433463846][4537 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 01:57:24][353607433463846][4537 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 01:57:24][353607433463846][4693 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 01:57:26][353607433463846][6708 ms][DEBUG] START check_boot_completed [2025-08-22 01:57:26][353607433463846][6708 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:57:26][353607433463846][6755 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 01:57:26][353607433463846][6755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:57:26][353607433463846][6818 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 01:57:26][353607433463846][6818 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 01:57:29][353607433463846][9832 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 01:57:29][353607433463846][9832 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353607433463846\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX90PHXMM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5147\"}'\'' -e'"" [2025-08-22 01:57:33][353607433463846][13847 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_02dd1565-0afd-4557-a446-e5fd6f530ede","id":"QR_02dd1565-0afd-4557-a446-e5fd6f530ede","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 01:57:33][353607433463846][14003 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3152 [2025-08-22 01:57:33][353607433463846][14003 ms][DEBUG] END runCmdUntilRes#2 in 4171 ms [2025-08-22 01:57:33][353607433463846][14004 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 01:58:32][354916442128780][0 ms][INFO] === Request start === [2025-08-22 01:58:32][354916442128780][1 ms][DEBUG] START check_scloud [2025-08-22 01:58:32][354916442128780][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 01:58:32][354916442128780][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27505 4994 23696752 126376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 01:58:32][354916442128780][305 ms][DEBUG] targetPkg: running [2025-08-22 01:58:32][354916442128780][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 01:58:32][354916442128780][305 ms][DEBUG] START check_boot_completed [2025-08-22 01:58:32][354916442128780][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 01:58:32][354916442128780][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 01:58:32][354916442128780][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 01:58:32][354916442128780][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 01:58:32][354916442128780][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 01:58:32][354916442128780][399 ms][DEBUG] START check_internet [2025-08-22 01:58:32][354916442128780][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 01:58:33][354916442128780][898 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.954/201.954/201.954/0.000 ms\n [2025-08-22 01:58:33][354916442128780][898 ms][DEBUG] check_internet: online [2025-08-22 01:58:33][354916442128780][898 ms][DEBUG] END check_internet in 500 ms [2025-08-22 01:58:33][354916442128780][898 ms][DEBUG] rawBody.length=1161 [2025-08-22 01:58:33][354916442128780][898 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442128780\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W4073GSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7926\"}'\'' -e'"" [2025-08-22 01:58:33][354916442128780][898 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 01:58:33][354916442128780][898 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916442128780\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W4073GSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7926\"}'\'' -e'"" [2025-08-22 01:58:37][354916442128780][5085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05bcec2a-3ad8-4bcc-b44d-e6d5abf9f263","id":"QR_05bcec2a-3ad8-4bcc-b44d-e6d5abf9f263","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 01:58:37][354916442128780][5241 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3152 [2025-08-22 01:58:37][354916442128780][5241 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-22 01:58:37][354916442128780][5241 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:03:38][356150112269876][1 ms][INFO] === Request start === [2025-08-22 02:03:38][356150112269876][2 ms][DEBUG] START check_scloud [2025-08-22 02:03:38][356150112269876][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:03:38][356150112269876][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 27505 4994 23847396 137712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:03:38][356150112269876][298 ms][DEBUG] targetPkg: running [2025-08-22 02:03:38][356150112269876][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 02:03:38][356150112269876][298 ms][DEBUG] START check_boot_completed [2025-08-22 02:03:38][356150112269876][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:03:38][356150112269876][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 02:03:38][356150112269876][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:03:38][356150112269876][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 02:03:38][356150112269876][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 02:03:38][356150112269876][377 ms][DEBUG] rawBody.length=1160 [2025-08-22 02:03:38][356150112269876][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356150112269876\",\"model\":\"SM-A315G\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8N70C9YXP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3520\"}'\'' -e'"" [2025-08-22 02:03:38][356150112269876][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:03:38][356150112269876][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356150112269876\",\"model\":\"SM-A315G\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8N70C9YXP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3520\"}'\'' -e'"" [2025-08-22 02:03:44][356150112269876][6047 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0340a51a-5bdc-4d0b-88e6-3640a708ca65","id":"QR_0340a51a-5bdc-4d0b-88e6-3640a708ca65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:03:44][356150112269876][6203 ms][DEBUG] proc_open done in 5827 ms; code=255; res.len=3152 [2025-08-22 02:03:44][356150112269876][6203 ms][DEBUG] END runCmdUntilRes#1 in 5827 ms [2025-08-22 02:03:44][356150112269876][6203 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:07:20][351771920853695][1 ms][INFO] === Request start === [2025-08-22 02:07:20][351771920853695][2 ms][DEBUG] START check_scloud [2025-08-22 02:07:20][351771920853695][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:07:20][351771920853695][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 27505 4994 23982592 149668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:07:20][351771920853695][304 ms][DEBUG] targetPkg: running [2025-08-22 02:07:20][351771920853695][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 02:07:20][351771920853695][304 ms][DEBUG] START check_boot_completed [2025-08-22 02:07:20][351771920853695][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:07:20][351771920853695][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 02:07:20][351771920853695][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:07:20][351771920853695][445 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 02:07:20][351771920853695][445 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 02:07:20][351771920853695][445 ms][DEBUG] rawBody.length=1161 [2025-08-22 02:07:20][351771920853695][445 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771920853695\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX92C9K0W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6049\"}'\'' -e'"" [2025-08-22 02:07:20][351771920853695][445 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:07:20][351771920853695][445 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771920853695\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX92C9K0W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6049\"}'\'' -e'"" [2025-08-22 02:07:24][351771920853695][4631 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9dd187b5-59bf-4e79-b007-fe7d11375d6a","id":"QR_9dd187b5-59bf-4e79-b007-fe7d11375d6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:07:24][351771920853695][4787 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3152 [2025-08-22 02:07:24][351771920853695][4787 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-22 02:07:24][351771920853695][4787 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:14:36][352923548728788][1 ms][INFO] === Request start === [2025-08-22 02:14:36][352923548728788][2 ms][DEBUG] START check_scloud [2025-08-22 02:14:36][352923548728788][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:14:36][352923548728788][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 27505 4994 24111768 161208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:14:36][352923548728788][310 ms][DEBUG] targetPkg: running [2025-08-22 02:14:36][352923548728788][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-22 02:14:36][352923548728788][310 ms][DEBUG] START check_boot_completed [2025-08-22 02:14:36][352923548728788][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:14:36][352923548728788][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 02:14:36][352923548728788][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:14:37][352923548728788][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 02:14:37][352923548728788][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 02:14:37][352923548728788][419 ms][DEBUG] START check_internet [2025-08-22 02:14:37][352923548728788][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 02:14:37][352923548728788][1028 ms][DEBUG] SU: done in 609 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.837/200.837/200.837/0.000 ms\n [2025-08-22 02:14:37][352923548728788][1028 ms][DEBUG] check_internet: online [2025-08-22 02:14:37][352923548728788][1028 ms][DEBUG] END check_internet in 609 ms [2025-08-22 02:14:37][352923548728788][1028 ms][DEBUG] rawBody.length=1161 [2025-08-22 02:14:37][352923548728788][1028 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923548728788\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB2MYQ1H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5794\"}'\'' -e'"" [2025-08-22 02:14:37][352923548728788][1028 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:14:37][352923548728788][1028 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923548728788\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB2MYQ1H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5794\"}'\'' -e'"" [2025-08-22 02:14:41][352923548728788][5152 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bc755f85-d34a-401a-b894-8527e704ca11","id":"QR_bc755f85-d34a-401a-b894-8527e704ca11","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:14:41][352923548728788][5309 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 02:14:41][352923548728788][5309 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 02:14:41][352923548728788][5309 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:15:14][357651716198089][1 ms][INFO] === Request start === [2025-08-22 02:15:14][357651716198089][2 ms][DEBUG] START check_scloud [2025-08-22 02:15:14][357651716198089][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:15:14][357651716198089][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 27505 4994 24232904 171884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:15:14][357651716198089][305 ms][DEBUG] targetPkg: running [2025-08-22 02:15:14][357651716198089][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 02:15:14][357651716198089][305 ms][DEBUG] START check_boot_completed [2025-08-22 02:15:14][357651716198089][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:15:14][357651716198089][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 02:15:14][357651716198089][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:15:14][357651716198089][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 02:15:14][357651716198089][384 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 02:15:14][357651716198089][384 ms][DEBUG] rawBody.length=1160 [2025-08-22 02:15:14][357651716198089][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716198089\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8T8000VHZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2703\"}'\'' -e'"" [2025-08-22 02:15:14][357651716198089][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:15:14][357651716198089][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651716198089\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8T8000VHZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2703\"}'\'' -e'"" [2025-08-22 02:15:20][357651716198089][5694 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b345e22c-aa23-4795-9a28-581238d6153f","id":"QR_b345e22c-aa23-4795-9a28-581238d6153f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:15:20][357651716198089][5850 ms][DEBUG] proc_open done in 5466 ms; code=255; res.len=3152 [2025-08-22 02:15:20][357651716198089][5850 ms][DEBUG] END runCmdUntilRes#1 in 5466 ms [2025-08-22 02:15:20][357651716198089][5850 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:27:34][355084250422180][1 ms][INFO] === Request start === [2025-08-22 02:27:34][355084250422180][2 ms][DEBUG] START check_scloud [2025-08-22 02:27:34][355084250422180][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:27:34][355084250422180][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 27505 4994 24337312 184112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:27:34][355084250422180][251 ms][DEBUG] targetPkg: running [2025-08-22 02:27:34][355084250422180][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 02:27:34][355084250422180][251 ms][DEBUG] START check_boot_completed [2025-08-22 02:27:34][355084250422180][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:27:34][355084250422180][283 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 02:27:34][355084250422180][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:27:34][355084250422180][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 02:27:34][355084250422180][330 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 02:27:34][355084250422180][330 ms][DEBUG] rawBody.length=1161 [2025-08-22 02:27:34][355084250422180][330 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250422180\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8Y202RZ6J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7030\"}'\'' -e'"" [2025-08-22 02:27:34][355084250422180][330 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:27:34][355084250422180][330 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355084250422180\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8Y202RZ6J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7030\"}'\'' -e'"" [2025-08-22 02:27:38][355084250422180][4282 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d699e68d-f79c-4e3b-8d3f-a0b96ba86670","id":"QR_d699e68d-f79c-4e3b-8d3f-a0b96ba86670","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:27:38][355084250422180][4438 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3152 [2025-08-22 02:27:38][355084250422180][4438 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-22 02:27:38][355084250422180][4438 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:30:12][355928817079554][1 ms][INFO] === Request start === [2025-08-22 02:30:12][355928817079554][2 ms][DEBUG] START check_scloud [2025-08-22 02:30:12][355928817079554][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:30:12][355928817079554][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 27505 4994 24507472 194824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:30:12][355928817079554][289 ms][DEBUG] targetPkg: running [2025-08-22 02:30:12][355928817079554][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-22 02:30:12][355928817079554][289 ms][DEBUG] START check_boot_completed [2025-08-22 02:30:12][355928817079554][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:30:12][355928817079554][336 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 02:30:12][355928817079554][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:30:12][355928817079554][399 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 02:30:12][355928817079554][399 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 02:30:12][355928817079554][399 ms][DEBUG] START check_internet [2025-08-22 02:30:12][355928817079554][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 02:30:13][355928817079554][742 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=124 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 124.847/124.847/124.847/0.000 ms\n [2025-08-22 02:30:13][355928817079554][742 ms][DEBUG] check_internet: online [2025-08-22 02:30:13][355928817079554][742 ms][DEBUG] END check_internet in 344 ms [2025-08-22 02:30:13][355928817079554][743 ms][DEBUG] rawBody.length=1159 [2025-08-22 02:30:13][355928817079554][743 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928817079554\",\"model\":\"SM-X200\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWA18Z47M\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1522\"}'\'' -e'"" [2025-08-22 02:30:13][355928817079554][743 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:30:13][355928817079554][743 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928817079554\",\"model\":\"SM-X200\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWA18Z47M\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1522\"}'\'' -e'"" [2025-08-22 02:30:17][355928817079554][5569 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7f0a3027-a894-49eb-a623-55040cd8e74a","id":"QR_7f0a3027-a894-49eb-a623-55040cd8e74a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:30:18][355928817079554][5725 ms][DEBUG] proc_open done in 4983 ms; code=255; res.len=3152 [2025-08-22 02:30:18][355928817079554][5725 ms][DEBUG] END runCmdUntilRes#1 in 4983 ms [2025-08-22 02:30:18][355928817079554][5725 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:41:05][350455582754398][1 ms][INFO] === Request start === [2025-08-22 02:41:05][350455582754398][2 ms][DEBUG] START check_scloud [2025-08-22 02:41:05][350455582754398][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:41:06][350455582754398][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 27505 4994 24616168 205416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:41:06][350455582754398][307 ms][DEBUG] targetPkg: running [2025-08-22 02:41:06][350455582754398][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 02:41:06][350455582754398][307 ms][DEBUG] START check_boot_completed [2025-08-22 02:41:06][350455582754398][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:41:06][350455582754398][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 02:41:06][350455582754398][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:41:06][350455582754398][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 02:41:06][350455582754398][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 02:41:06][350455582754398][400 ms][DEBUG] rawBody.length=1160 [2025-08-22 02:41:06][350455582754398][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455582754398\",\"model\":\"SM-A165M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y70PZMHZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7102\"}'\'' -e'"" [2025-08-22 02:41:06][350455582754398][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:41:06][350455582754398][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455582754398\",\"model\":\"SM-A165M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y70PZMHZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7102\"}'\'' -e'"" [2025-08-22 02:41:13][350455582754398][7617 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dd7d87df-9d40-45ec-8166-88705a21a7c5","id":"QR_dd7d87df-9d40-45ec-8166-88705a21a7c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:41:13][350455582754398][7773 ms][DEBUG] proc_open done in 7373 ms; code=255; res.len=3152 [2025-08-22 02:41:13][350455582754398][7773 ms][DEBUG] END runCmdUntilRes#1 in 7373 ms [2025-08-22 02:41:13][350455582754398][7773 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:42:06][353281390112877][1 ms][INFO] === Request start === [2025-08-22 02:42:06][353281390112877][2 ms][DEBUG] START check_scloud [2025-08-22 02:42:06][353281390112877][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:42:07][353281390112877][245 ms][DEBUG] SU: done in 243 ms; outu0_a118 27505 4994 24757720 217624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:42:07][353281390112877][245 ms][DEBUG] targetPkg: running [2025-08-22 02:42:07][353281390112877][245 ms][DEBUG] END check_scloud in 243 ms [2025-08-22 02:42:07][353281390112877][245 ms][DEBUG] START check_boot_completed [2025-08-22 02:42:07][353281390112877][245 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:42:07][353281390112877][307 ms][DEBUG] ADB: done in 62 ms; out [2025-08-22 02:42:07][353281390112877][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:42:07][353281390112877][370 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 02:42:07][353281390112877][370 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 02:42:07][353281390112877][370 ms][DEBUG] START check_internet [2025-08-22 02:42:07][353281390112877][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 02:42:07][353281390112877][870 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.250/202.250/202.250/0.000 ms\n [2025-08-22 02:42:07][353281390112877][870 ms][DEBUG] check_internet: online [2025-08-22 02:42:07][353281390112877][870 ms][DEBUG] END check_internet in 500 ms [2025-08-22 02:42:07][353281390112877][870 ms][DEBUG] rawBody.length=1160 [2025-08-22 02:42:07][353281390112877][870 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353281390112877\",\"model\":\"SM-G998B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCR2028M7L\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2391\"}'\'' -e'"" [2025-08-22 02:42:07][353281390112877][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:42:07][353281390112877][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353281390112877\",\"model\":\"SM-G998B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCR2028M7L\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2391\"}'\'' -e'"" [2025-08-22 02:42:14][353281390112877][7149 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c236ec8-5690-4bbf-b5a5-f18dce642034","id":"QR_8c236ec8-5690-4bbf-b5a5-f18dce642034","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:42:14][353281390112877][7306 ms][DEBUG] proc_open done in 6435 ms; code=255; res.len=3152 [2025-08-22 02:42:14][353281390112877][7306 ms][DEBUG] END runCmdUntilRes#1 in 6435 ms [2025-08-22 02:42:14][353281390112877][7306 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:42:33][357576770079364][0 ms][INFO] === Request start === [2025-08-22 02:42:33][357576770079364][1 ms][DEBUG] START check_scloud [2025-08-22 02:42:33][357576770079364][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:42:34][357576770079364][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 27505 4994 24885948 228300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:42:34][357576770079364][284 ms][DEBUG] targetPkg: running [2025-08-22 02:42:34][357576770079364][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-22 02:42:34][357576770079364][284 ms][DEBUG] START check_boot_completed [2025-08-22 02:42:34][357576770079364][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:42:34][357576770079364][330 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 02:42:34][357576770079364][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:42:34][357576770079364][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 02:42:34][357576770079364][377 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 02:42:34][357576770079364][378 ms][DEBUG] START check_internet [2025-08-22 02:42:34][357576770079364][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 02:42:34][357576770079364][799 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=300 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 300.144/300.144/300.144/0.000 ms\n [2025-08-22 02:42:34][357576770079364][799 ms][DEBUG] check_internet: online [2025-08-22 02:42:34][357576770079364][799 ms][DEBUG] END check_internet in 422 ms [2025-08-22 02:42:34][357576770079364][799 ms][DEBUG] rawBody.length=1161 [2025-08-22 02:42:34][357576770079364][799 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576770079364\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX22DA9FL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1757\"}'\'' -e'"" [2025-08-22 02:42:34][357576770079364][799 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:42:34][357576770079364][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576770079364\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX22DA9FL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1757\"}'\'' -e'"" [2025-08-22 02:42:39][357576770079364][5126 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64dda7cb-8530-4bc4-8fd7-cd0abc049ddc","id":"QR_64dda7cb-8530-4bc4-8fd7-cd0abc049ddc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:42:39][357576770079364][5282 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3152 [2025-08-22 02:42:39][357576770079364][5282 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-22 02:42:39][357576770079364][5282 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:50:08][352952650299320][1 ms][INFO] === Request start === [2025-08-22 02:50:08][352952650299320][2 ms][DEBUG] START check_scloud [2025-08-22 02:50:08][352952650299320][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:50:09][352952650299320][259 ms][DEBUG] SU: done in 257 ms; outu0_a118 27505 4994 25008984 239568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:50:09][352952650299320][259 ms][DEBUG] targetPkg: running [2025-08-22 02:50:09][352952650299320][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-22 02:50:09][352952650299320][259 ms][DEBUG] START check_boot_completed [2025-08-22 02:50:09][352952650299320][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:50:09][352952650299320][306 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 02:50:09][352952650299320][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:50:09][352952650299320][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 02:50:09][352952650299320][353 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 02:50:09][352952650299320][353 ms][DEBUG] START check_internet [2025-08-22 02:50:09][352952650299320][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 02:50:09][352952650299320][821 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.535/202.535/202.535/0.000 ms\n [2025-08-22 02:50:09][352952650299320][821 ms][DEBUG] check_internet: online [2025-08-22 02:50:09][352952650299320][822 ms][DEBUG] END check_internet in 469 ms [2025-08-22 02:50:09][352952650299320][822 ms][DEBUG] rawBody.length=1161 [2025-08-22 02:50:09][352952650299320][822 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352952650299320\",\"model\":\"SM-X706B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T10CVYSF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9215\"}'\'' -e'"" [2025-08-22 02:50:09][352952650299320][822 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:50:09][352952650299320][822 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352952650299320\",\"model\":\"SM-X706B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T10CVYSF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9215\"}'\'' -e'"" [2025-08-22 02:50:13][352952650299320][4492 ms][DEBUG] proc_open done in 3670 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 02:50:13][352952650299320][4493 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-22 02:50:13][352952650299320][4493 ms][WARN] Detected error: Process with pid 27505 either refused to load frida-agent, or terminated during injection [2025-08-22 02:50:13][352952650299320][4493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 02:50:13][352952650299320][4633 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 02:50:13][352952650299320][4633 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 02:50:13][352952650299320][4633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 02:50:13][352952650299320][4773 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 02:50:13][352952650299320][4774 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 02:50:13][352952650299320][4961 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 02:50:15][352952650299320][6976 ms][DEBUG] START check_boot_completed [2025-08-22 02:50:15][352952650299320][6976 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:50:15][352952650299320][7023 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 02:50:15][352952650299320][7023 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:50:15][352952650299320][7070 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 02:50:15][352952650299320][7071 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 02:50:18][352952650299320][10085 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 02:50:18][352952650299320][10085 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352952650299320\",\"model\":\"SM-X706B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T10CVYSF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9215\"}'\'' -e'"" [2025-08-22 02:50:23][352952650299320][14099 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_27c6a88a-6421-4ac3-9430-177cdbe9986b","id":"QR_27c6a88a-6421-4ac3-9430-177cdbe9986b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:50:23][352952650299320][14256 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3152 [2025-08-22 02:50:23][352952650299320][14256 ms][DEBUG] END runCmdUntilRes#2 in 4171 ms [2025-08-22 02:50:23][352952650299320][14256 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:58:11][354827420422154][1 ms][INFO] === Request start === [2025-08-22 02:58:11][354827420422154][2 ms][DEBUG] START check_scloud [2025-08-22 02:58:11][354827420422154][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:58:12][354827420422154][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 29951 4994 23618548 126660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:58:12][354827420422154][303 ms][DEBUG] targetPkg: running [2025-08-22 02:58:12][354827420422154][303 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 02:58:12][354827420422154][303 ms][DEBUG] START check_boot_completed [2025-08-22 02:58:12][354827420422154][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:58:12][354827420422154][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 02:58:12][354827420422154][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:58:12][354827420422154][396 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 02:58:12][354827420422154][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 02:58:12][354827420422154][396 ms][DEBUG] START check_internet [2025-08-22 02:58:12][354827420422154][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 02:58:12][354827420422154][943 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.301/202.301/202.301/0.000 ms\n [2025-08-22 02:58:12][354827420422154][943 ms][DEBUG] check_internet: online [2025-08-22 02:58:12][354827420422154][943 ms][DEBUG] END check_internet in 547 ms [2025-08-22 02:58:12][354827420422154][943 ms][DEBUG] rawBody.length=1160 [2025-08-22 02:58:12][354827420422154][943 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354827420422154\",\"model\":\"SM-F956W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX712EN3E\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1912\"}'\'' -e'"" [2025-08-22 02:58:12][354827420422154][943 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:58:12][354827420422154][943 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354827420422154\",\"model\":\"SM-F956W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX712EN3E\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1912\"}'\'' -e'"" [2025-08-22 02:58:18][354827420422154][6613 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8893c933-404d-4e4b-bf5f-f0c5be5bea47","id":"QR_8893c933-404d-4e4b-bf5f-f0c5be5bea47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:58:18][354827420422154][6770 ms][DEBUG] proc_open done in 5826 ms; code=255; res.len=3152 [2025-08-22 02:58:18][354827420422154][6770 ms][DEBUG] END runCmdUntilRes#1 in 5826 ms [2025-08-22 02:58:18][354827420422154][6770 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 02:59:07][351460450980199][1 ms][INFO] === Request start === [2025-08-22 02:59:07][351460450980199][2 ms][DEBUG] START check_scloud [2025-08-22 02:59:07][351460450980199][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 02:59:08][351460450980199][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 29951 4994 23753892 137636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 02:59:08][351460450980199][314 ms][DEBUG] targetPkg: running [2025-08-22 02:59:08][351460450980199][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 02:59:08][351460450980199][314 ms][DEBUG] START check_boot_completed [2025-08-22 02:59:08][351460450980199][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 02:59:08][351460450980199][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 02:59:08][351460450980199][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 02:59:08][351460450980199][409 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 02:59:08][351460450980199][410 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-22 02:59:08][351460450980199][410 ms][DEBUG] rawBody.length=1160 [2025-08-22 02:59:08][351460450980199][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450980199\",\"model\":\"SM-A156M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX20NYDLN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7590\"}'\'' -e'"" [2025-08-22 02:59:08][351460450980199][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 02:59:08][351460450980199][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450980199\",\"model\":\"SM-A156M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX20NYDLN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7590\"}'\'' -e'"" [2025-08-22 02:59:13][351460450980199][5797 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c17d18b-85f0-4879-be68-745d354bb988","id":"QR_0c17d18b-85f0-4879-be68-745d354bb988","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 02:59:13][351460450980199][5953 ms][DEBUG] proc_open done in 5543 ms; code=255; res.len=3152 [2025-08-22 02:59:13][351460450980199][5953 ms][DEBUG] END runCmdUntilRes#1 in 5543 ms [2025-08-22 02:59:13][351460450980199][5953 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:07:21][351351023347448][1 ms][INFO] === Request start === [2025-08-22 03:07:21][351351023347448][2 ms][DEBUG] START check_scloud [2025-08-22 03:07:21][351351023347448][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:07:21][351351023347448][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 29951 4994 23878972 149004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:07:21][351351023347448][315 ms][DEBUG] targetPkg: running [2025-08-22 03:07:21][351351023347448][316 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 03:07:21][351351023347448][316 ms][DEBUG] START check_boot_completed [2025-08-22 03:07:21][351351023347448][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:07:21][351351023347448][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 03:07:21][351351023347448][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:07:21][351351023347448][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 03:07:21][351351023347448][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 03:07:21][351351023347448][425 ms][DEBUG] rawBody.length=1161 [2025-08-22 03:07:21][351351023347448][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351023347448\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX624J6XK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8990\"}'\'' -e'"" [2025-08-22 03:07:21][351351023347448][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:07:21][351351023347448][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351351023347448\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX624J6XK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8990\"}'\'' -e'"" [2025-08-22 03:07:25][351351023347448][4658 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed4174d4-af28-41f7-9a22-d26adf2e952d","id":"QR_ed4174d4-af28-41f7-9a22-d26adf2e952d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:07:25][351351023347448][4814 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3152 [2025-08-22 03:07:25][351351023347448][4814 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-22 03:07:25][351351023347448][4814 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:09:08][350896386305798][1 ms][INFO] === Request start === [2025-08-22 03:09:08][350896386305798][2 ms][DEBUG] START check_scloud [2025-08-22 03:09:08][350896386305798][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:09:08][350896386305798][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 29951 4994 24033644 161068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:09:08][350896386305798][306 ms][DEBUG] targetPkg: running [2025-08-22 03:09:08][350896386305798][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 03:09:08][350896386305798][306 ms][DEBUG] START check_boot_completed [2025-08-22 03:09:08][350896386305798][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:09:08][350896386305798][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:09:08][350896386305798][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:09:08][350896386305798][401 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 03:09:08][350896386305798][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 03:09:08][350896386305798][402 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:09:08][350896386305798][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896386305798\",\"model\":\"SM-A165M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y20ERK2F\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-08-22 03:09:08][350896386305798][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:09:08][350896386305798][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350896386305798\",\"model\":\"SM-A165M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y20ERK2F\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-08-22 03:09:14][350896386305798][6898 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7b238378-91cb-4935-9e3d-304a063b477b","id":"QR_7b238378-91cb-4935-9e3d-304a063b477b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:09:15][350896386305798][7054 ms][DEBUG] proc_open done in 6652 ms; code=255; res.len=3152 [2025-08-22 03:09:15][350896386305798][7054 ms][DEBUG] END runCmdUntilRes#1 in 6652 ms [2025-08-22 03:09:15][350896386305798][7054 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:10:30][355707114256747][1 ms][INFO] === Request start === [2025-08-22 03:10:30][355707114256747][2 ms][DEBUG] START check_scloud [2025-08-22 03:10:30][355707114256747][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:10:30][355707114256747][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 29951 4994 24177288 171852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:10:30][355707114256747][300 ms][DEBUG] targetPkg: running [2025-08-22 03:10:30][355707114256747][300 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 03:10:30][355707114256747][300 ms][DEBUG] START check_boot_completed [2025-08-22 03:10:30][355707114256747][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:10:30][355707114256747][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:10:30][355707114256747][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:10:30][355707114256747][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 03:10:30][355707114256747][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 03:10:30][355707114256747][409 ms][DEBUG] START check_internet [2025-08-22 03:10:30][355707114256747][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:10:31][355707114256747][924 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.732/199.732/199.732/0.000 ms\n [2025-08-22 03:10:31][355707114256747][924 ms][DEBUG] check_internet: online [2025-08-22 03:10:31][355707114256747][924 ms][DEBUG] END check_internet in 515 ms [2025-08-22 03:10:31][355707114256747][924 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:10:31][355707114256747][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114256747\",\"model\":\"SM-A515F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8R100EQRL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7529\"}'\'' -e'"" [2025-08-22 03:10:31][355707114256747][924 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:10:31][355707114256747][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355707114256747\",\"model\":\"SM-A515F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8R100EQRL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7529\"}'\'' -e'"" [2025-08-22 03:10:36][355707114256747][6688 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1a3023e7-bfdb-475c-8bed-a9173bf64965","id":"QR_1a3023e7-bfdb-475c-8bed-a9173bf64965","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:10:37][355707114256747][6845 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3152 [2025-08-22 03:10:37][355707114256747][6845 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-08-22 03:10:37][355707114256747][6845 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:12:08][351460450178919][0 ms][INFO] === Request start === [2025-08-22 03:12:08][351460450178919][1 ms][DEBUG] START check_scloud [2025-08-22 03:12:08][351460450178919][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:12:08][351460450178919][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 29951 4994 24319660 182864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:12:08][351460450178919][312 ms][DEBUG] targetPkg: running [2025-08-22 03:12:08][351460450178919][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 03:12:08][351460450178919][312 ms][DEBUG] START check_boot_completed [2025-08-22 03:12:08][351460450178919][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:12:08][351460450178919][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 03:12:08][351460450178919][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:12:08][351460450178919][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 03:12:08][351460450178919][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 03:12:08][351460450178919][421 ms][DEBUG] START check_internet [2025-08-22 03:12:08][351460450178919][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:12:08][351460450178919][749 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.408/203.408/203.408/0.000 ms\n [2025-08-22 03:12:08][351460450178919][749 ms][DEBUG] check_internet: online [2025-08-22 03:12:08][351460450178919][749 ms][DEBUG] END check_internet in 328 ms [2025-08-22 03:12:08][351460450178919][749 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:12:08][351460450178919][749 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4970\"}'\'' -e'"" [2025-08-22 03:12:08][351460450178919][749 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:12:08][351460450178919][750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4970\"}'\'' -e'"" [2025-08-22 03:12:12][351460450178919][4701 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 03:12:13][351460450178919][4857 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=115 [2025-08-22 03:12:13][351460450178919][4857 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-22 03:12:13][351460450178919][4857 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 03:12:13][][0 ms][INFO] === Request start === [2025-08-22 03:12:13][][1 ms][DEBUG] START check_scloud [2025-08-22 03:12:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:12:13][][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 29951 4994 24449068 194524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:12:13][][325 ms][DEBUG] targetPkg: running [2025-08-22 03:12:13][][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-22 03:12:13][][325 ms][DEBUG] START check_boot_completed [2025-08-22 03:12:13][][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:12:13][][371 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:12:13][][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:12:13][][418 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:12:13][][418 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 03:12:13][][418 ms][DEBUG] START check_internet [2025-08-22 03:12:13][][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:12:14][][653 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=136 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 136.460/136.460/136.460/0.000 ms\n [2025-08-22 03:12:14][][653 ms][DEBUG] check_internet: online [2025-08-22 03:12:14][][653 ms][DEBUG] END check_internet in 234 ms [2025-08-22 03:12:14][][653 ms][DEBUG] rawBody.length=1130 [2025-08-22 03:12:14][][653 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4878\"}'\'' -e'"" [2025-08-22 03:12:14][][653 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:12:14][][653 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4878\"}'\'' -e'"" [2025-08-22 03:12:18][355362110100406][1 ms][INFO] === Request start === [2025-08-22 03:12:18][][5558 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 03:12:19][][5714 ms][DEBUG] proc_open done in 5061 ms; code=255; res.len=115 [2025-08-22 03:12:19][][5714 ms][DEBUG] END runCmdUntilRes#1 in 5061 ms [2025-08-22 03:12:19][][5714 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 03:12:19][][0 ms][INFO] === Request start === [2025-08-22 03:12:19][][1 ms][DEBUG] START check_scloud [2025-08-22 03:12:19][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:12:19][][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 29951 4994 24573108 205180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:12:19][][312 ms][DEBUG] targetPkg: running [2025-08-22 03:12:19][][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 03:12:19][][312 ms][DEBUG] START check_boot_completed [2025-08-22 03:12:19][][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:12:19][][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 03:12:19][][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:12:19][][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:12:19][][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 03:12:19][][390 ms][DEBUG] START check_internet [2025-08-22 03:12:19][][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:12:20][][672 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.111/181.111/181.111/0.000 ms\n [2025-08-22 03:12:20][][672 ms][DEBUG] check_internet: online [2025-08-22 03:12:20][][672 ms][DEBUG] END check_internet in 282 ms [2025-08-22 03:12:20][][672 ms][DEBUG] rawBody.length=1130 [2025-08-22 03:12:20][][672 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6904\"}'\'' -e'"" [2025-08-22 03:12:20][][672 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:12:20][][672 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A156M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6904\"}'\'' -e'"" [2025-08-22 03:12:23][][4389 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 03:12:23][][4546 ms][DEBUG] proc_open done in 3873 ms; code=255; res.len=115 [2025-08-22 03:12:23][][4546 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-22 03:12:23][][4546 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 03:12:24][355362110100406][6089 ms][DEBUG] START check_scloud [2025-08-22 03:12:24][355362110100406][6089 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:12:24][351460450178919][0 ms][INFO] === Request start === [2025-08-22 03:12:24][355362110100406][6354 ms][DEBUG] SU: done in 266 ms; outu0_a118 29951 4994 24754620 217288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:12:24][355362110100406][6355 ms][DEBUG] targetPkg: running [2025-08-22 03:12:24][355362110100406][6355 ms][DEBUG] END check_scloud in 266 ms [2025-08-22 03:12:24][355362110100406][6355 ms][DEBUG] START check_boot_completed [2025-08-22 03:12:24][355362110100406][6355 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:12:25][355362110100406][6401 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 03:12:25][355362110100406][6401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:12:25][355362110100406][6495 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 03:12:25][355362110100406][6495 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-22 03:12:25][355362110100406][6495 ms][DEBUG] START check_internet [2025-08-22 03:12:25][355362110100406][6495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:12:25][355362110100406][6776 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.827/135.827/135.827/0.000 ms\n [2025-08-22 03:12:25][355362110100406][6776 ms][DEBUG] check_internet: online [2025-08-22 03:12:25][355362110100406][6776 ms][DEBUG] END check_internet in 281 ms [2025-08-22 03:12:25][355362110100406][6776 ms][DEBUG] rawBody.length=1161 [2025-08-22 03:12:25][355362110100406][6777 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362110100406\",\"model\":\"SM-G985F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N22577GM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7634\"}'\'' -e'"" [2025-08-22 03:12:25][355362110100406][6777 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:12:25][355362110100406][6777 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355362110100406\",\"model\":\"SM-G985F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N22577GM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7634\"}'\'' -e'"" [2025-08-22 03:12:29][355362110100406][11166 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d12e4671-b19a-459d-aa8e-00f77c18d930","id":"QR_d12e4671-b19a-459d-aa8e-00f77c18d930","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:12:29][355362110100406][11322 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3152 [2025-08-22 03:12:29][355362110100406][11322 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-22 03:12:29][355362110100406][11322 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:12:30][351460450178919][6085 ms][DEBUG] START check_scloud [2025-08-22 03:12:30][351460450178919][6085 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:12:31][351460450178919][6398 ms][DEBUG] SU: done in 312 ms; outu0_a118 29951 4994 24901280 228956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:12:31][351460450178919][6398 ms][DEBUG] targetPkg: running [2025-08-22 03:12:31][351460450178919][6398 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 03:12:31][351460450178919][6398 ms][DEBUG] START check_boot_completed [2025-08-22 03:12:31][351460450178919][6398 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:12:31][351460450178919][6444 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:12:31][351460450178919][6444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:12:31][351460450178919][6491 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:12:31][351460450178919][6491 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 03:12:31][351460450178919][6491 ms][DEBUG] START check_internet [2025-08-22 03:12:31][351460450178919][6491 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:12:31][351460450178919][6805 ms][DEBUG] SU: done in 314 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.648/225.648/225.648/0.000 ms\n [2025-08-22 03:12:31][351460450178919][6805 ms][DEBUG] check_internet: online [2025-08-22 03:12:31][351460450178919][6805 ms][DEBUG] END check_internet in 314 ms [2025-08-22 03:12:31][351460450178919][6806 ms][DEBUG] rawBody.length=1161 [2025-08-22 03:12:31][351460450178919][6806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"GTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3497\"}'\'' -e'"" [2025-08-22 03:12:31][351460450178919][6806 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:12:31][351460450178919][6806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"GTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3497\"}'\'' -e'"" [2025-08-22 03:12:35][351460450178919][10943 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af0deb9b-aaa5-442c-b13c-9f333a40a123","id":"QR_af0deb9b-aaa5-442c-b13c-9f333a40a123","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:12:35][351460450178919][11099 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3152 [2025-08-22 03:12:35][351460450178919][11100 ms][DEBUG] END runCmdUntilRes#1 in 4294 ms [2025-08-22 03:12:35][351460450178919][11100 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:20:15][354562113457395][1 ms][INFO] === Request start === [2025-08-22 03:20:15][354562113457395][2 ms][DEBUG] START check_scloud [2025-08-22 03:20:15][354562113457395][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:20:16][354562113457395][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 29951 4994 24999504 240472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:20:16][354562113457395][315 ms][DEBUG] targetPkg: running [2025-08-22 03:20:16][354562113457395][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 03:20:16][354562113457395][315 ms][DEBUG] START check_boot_completed [2025-08-22 03:20:16][354562113457395][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:20:16][354562113457395][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 03:20:16][354562113457395][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:20:16][354562113457395][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:20:16][354562113457395][394 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 03:20:16][354562113457395][394 ms][DEBUG] START check_internet [2025-08-22 03:20:16][354562113457395][394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:20:16][354562113457395][877 ms][DEBUG] SU: done in 483 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.069/202.069/202.069/0.000 ms\n [2025-08-22 03:20:16][354562113457395][878 ms][DEBUG] check_internet: online [2025-08-22 03:20:16][354562113457395][878 ms][DEBUG] END check_internet in 484 ms [2025-08-22 03:20:16][354562113457395][878 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:20:16][354562113457395][878 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354562113457395\",\"model\":\"SM-A515W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58NA03BQ2W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1363\"}'\'' -e'"" [2025-08-22 03:20:16][354562113457395][878 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:20:16][354562113457395][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354562113457395\",\"model\":\"SM-A515W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58NA03BQ2W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1363\"}'\'' -e'"" [2025-08-22 03:20:20][354562113457395][4580 ms][DEBUG] proc_open done in 3702 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 03:20:20][354562113457395][4580 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-22 03:20:20][354562113457395][4580 ms][WARN] Detected error: Process with pid 29951 either refused to load frida-agent, or terminated during injection [2025-08-22 03:20:20][354562113457395][4580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 03:20:20][354562113457395][4720 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 03:20:20][354562113457395][4720 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 03:20:20][354562113457395][4720 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 03:20:20][354562113457395][4845 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 03:20:20][354562113457395][4845 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 03:20:20][354562113457395][5003 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 03:20:22][354562113457395][7016 ms][DEBUG] START check_boot_completed [2025-08-22 03:20:22][354562113457395][7016 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:20:22][354562113457395][7048 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 03:20:22][354562113457395][7048 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:20:22][354562113457395][7094 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:20:22][354562113457395][7094 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 03:20:25][354562113457395][10109 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 03:20:25][354562113457395][10110 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354562113457395\",\"model\":\"SM-A515W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58NA03BQ2W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1363\"}'\'' -e'"" [2025-08-22 03:20:33][354562113457395][17889 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b514a93b-4d7a-4702-8aeb-ccf1be864442","id":"QR_b514a93b-4d7a-4702-8aeb-ccf1be864442","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:20:33][354562113457395][18045 ms][DEBUG] proc_open done in 7936 ms; code=255; res.len=3152 [2025-08-22 03:20:33][354562113457395][18045 ms][DEBUG] END runCmdUntilRes#2 in 7936 ms [2025-08-22 03:20:33][354562113457395][18045 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:49:08][350792528051269][1 ms][INFO] === Request start === [2025-08-22 03:49:08][350792528051269][2 ms][DEBUG] START check_scloud [2025-08-22 03:49:08][350792528051269][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:49:08][350792528051269][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 32322 4994 23598424 127280 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:49:08][350792528051269][308 ms][DEBUG] targetPkg: running [2025-08-22 03:49:08][350792528051269][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 03:49:08][350792528051269][308 ms][DEBUG] START check_boot_completed [2025-08-22 03:49:08][350792528051269][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:49:09][350792528051269][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 03:49:09][350792528051269][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:49:09][350792528051269][402 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 03:49:09][350792528051269][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 03:49:09][350792528051269][402 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:49:09][350792528051269][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528051269\",\"model\":\"SM-A165M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y30NP4MD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5973\"}'\'' -e'"" [2025-08-22 03:49:09][350792528051269][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:49:09][350792528051269][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792528051269\",\"model\":\"SM-A165M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y30NP4MD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5973\"}'\'' -e'"" [2025-08-22 03:49:14][350792528051269][5792 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_853bcd02-166e-47c5-9775-64f3febd1438","id":"QR_853bcd02-166e-47c5-9775-64f3febd1438","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:49:14][350792528051269][5948 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3152 [2025-08-22 03:49:14][350792528051269][5948 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-08-22 03:49:14][350792528051269][5948 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:50:07][352349697525926][0 ms][INFO] === Request start === [2025-08-22 03:50:07][352349697525926][1 ms][DEBUG] START check_scloud [2025-08-22 03:50:07][352349697525926][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:50:07][352349697525926][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 32322 4994 23731720 138088 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:50:07][352349697525926][258 ms][DEBUG] targetPkg: running [2025-08-22 03:50:07][352349697525926][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-22 03:50:07][352349697525926][258 ms][DEBUG] START check_boot_completed [2025-08-22 03:50:07][352349697525926][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:50:07][352349697525926][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:50:07][352349697525926][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:50:07][352349697525926][383 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 03:50:07][352349697525926][383 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-22 03:50:07][352349697525926][383 ms][DEBUG] START check_internet [2025-08-22 03:50:07][352349697525926][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:50:08][352349697525926][992 ms][DEBUG] SU: done in 609 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.691/197.691/197.691/0.000 ms\n [2025-08-22 03:50:08][352349697525926][992 ms][DEBUG] check_internet: online [2025-08-22 03:50:08][352349697525926][992 ms][DEBUG] END check_internet in 609 ms [2025-08-22 03:50:08][352349697525926][992 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:50:08][352349697525926][992 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697525926\",\"model\":\"SM-G781W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCR609QE8Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8382\"}'\'' -e'"" [2025-08-22 03:50:08][352349697525926][992 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:50:08][352349697525926][993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352349697525926\",\"model\":\"SM-G781W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCR609QE8Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8382\"}'\'' -e'"" [2025-08-22 03:50:14][352349697525926][7584 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_438c5ae8-63d7-48a7-8a9d-f539f80d62d8","id":"QR_438c5ae8-63d7-48a7-8a9d-f539f80d62d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:50:14][352349697525926][7740 ms][DEBUG] proc_open done in 6748 ms; code=255; res.len=3152 [2025-08-22 03:50:14][352349697525926][7740 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-08-22 03:50:14][352349697525926][7740 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:50:47][359122720358984][0 ms][INFO] === Request start === [2025-08-22 03:50:47][359122720358984][1 ms][DEBUG] START check_scloud [2025-08-22 03:50:47][359122720358984][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:50:48][359122720358984][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 32322 4994 23882284 150012 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:50:48][359122720358984][302 ms][DEBUG] targetPkg: running [2025-08-22 03:50:48][359122720358984][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 03:50:48][359122720358984][302 ms][DEBUG] START check_boot_completed [2025-08-22 03:50:48][359122720358984][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:50:48][359122720358984][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:50:48][359122720358984][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:50:48][359122720358984][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:50:48][359122720358984][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 03:50:48][359122720358984][396 ms][DEBUG] START check_internet [2025-08-22 03:50:48][359122720358984][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:50:48][359122720358984][677 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.889/178.889/178.889/0.000 ms\n [2025-08-22 03:50:48][359122720358984][677 ms][DEBUG] check_internet: online [2025-08-22 03:50:48][359122720358984][677 ms][DEBUG] END check_internet in 281 ms [2025-08-22 03:50:48][359122720358984][677 ms][DEBUG] rawBody.length=1161 [2025-08-22 03:50:48][359122720358984][677 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359122720358984\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXB1DS45N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7702\"}'\'' -e'"" [2025-08-22 03:50:48][359122720358984][677 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:50:48][359122720358984][677 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359122720358984\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXB1DS45N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7702\"}'\'' -e'"" [2025-08-22 03:50:52][359122720358984][4644 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b10f75fb-8108-492c-b694-9df7f828546c","id":"QR_b10f75fb-8108-492c-b694-9df7f828546c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:50:52][359122720358984][4800 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3152 [2025-08-22 03:50:52][359122720358984][4801 ms][DEBUG] END runCmdUntilRes#1 in 4123 ms [2025-08-22 03:50:52][359122720358984][4801 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:50:55][357567912255186][0 ms][INFO] === Request start === [2025-08-22 03:50:55][357567912255186][1 ms][DEBUG] START check_scloud [2025-08-22 03:50:55][357567912255186][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:50:56][357567912255186][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 32322 4994 24067828 160660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:50:56][357567912255186][270 ms][DEBUG] targetPkg: running [2025-08-22 03:50:56][357567912255186][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-22 03:50:56][357567912255186][270 ms][DEBUG] START check_boot_completed [2025-08-22 03:50:56][357567912255186][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:50:56][357567912255186][317 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:50:56][357567912255186][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:50:56][357567912255186][365 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 03:50:56][357567912255186][365 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 03:50:56][357567912255186][365 ms][DEBUG] START check_internet [2025-08-22 03:50:56][357567912255186][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:50:56][357567912255186][723 ms][DEBUG] SU: done in 358 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=235 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 235.602/235.602/235.602/0.000 ms\n [2025-08-22 03:50:56][357567912255186][723 ms][DEBUG] check_internet: online [2025-08-22 03:50:56][357567912255186][723 ms][DEBUG] END check_internet in 358 ms [2025-08-22 03:50:56][357567912255186][723 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:50:56][357567912255186][723 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567912255186\",\"model\":\"SM-A256E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX239KY8N\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5162\"}'\'' -e'"" [2025-08-22 03:50:56][357567912255186][723 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:50:56][357567912255186][723 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567912255186\",\"model\":\"SM-A256E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX239KY8N\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5162\"}'\'' -e'"" [2025-08-22 03:51:03][357567912255186][7908 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8542fe06-6e4e-4ae7-ab0d-9452139881e3","id":"QR_8542fe06-6e4e-4ae7-ab0d-9452139881e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:51:03][357567912255186][8065 ms][DEBUG] proc_open done in 7341 ms; code=255; res.len=3152 [2025-08-22 03:51:03][357567912255186][8065 ms][DEBUG] END runCmdUntilRes#1 in 7341 ms [2025-08-22 03:51:03][357567912255186][8065 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:51:16][350915068892921][1 ms][INFO] === Request start === [2025-08-22 03:51:16][350915068892921][2 ms][DEBUG] START check_scloud [2025-08-22 03:51:16][350915068892921][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:51:16][350915068892921][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 32322 4994 24187864 172808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:51:16][350915068892921][307 ms][DEBUG] targetPkg: running [2025-08-22 03:51:16][350915068892921][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 03:51:16][350915068892921][308 ms][DEBUG] START check_boot_completed [2025-08-22 03:51:16][350915068892921][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:51:16][350915068892921][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:51:16][350915068892921][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:51:16][350915068892921][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:51:16][350915068892921][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 03:51:16][350915068892921][401 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:51:16][350915068892921][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915068892921\",\"model\":\"SM-A047M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8W70684QD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1363\"}'\'' -e'"" [2025-08-22 03:51:16][350915068892921][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:51:16][350915068892921][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350915068892921\",\"model\":\"SM-A047M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8W70684QD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1363\"}'\'' -e'"" [2025-08-22 03:51:21][350915068892921][5103 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4187bbd-076c-4ee2-8dee-9c20e4dbd567","id":"QR_f4187bbd-076c-4ee2-8dee-9c20e4dbd567","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:51:21][350915068892921][5259 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3152 [2025-08-22 03:51:21][350915068892921][5259 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-08-22 03:51:21][350915068892921][5259 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:51:23][357576775579095][0 ms][INFO] === Request start === [2025-08-22 03:51:23][357576775579095][1 ms][DEBUG] START check_scloud [2025-08-22 03:51:23][357576775579095][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:51:23][357576775579095][249 ms][DEBUG] SU: done in 248 ms; outu0_a118 32322 4994 24301756 183944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:51:23][357576775579095][249 ms][DEBUG] targetPkg: running [2025-08-22 03:51:23][357576775579095][249 ms][DEBUG] END check_scloud in 248 ms [2025-08-22 03:51:23][357576775579095][249 ms][DEBUG] START check_boot_completed [2025-08-22 03:51:23][357576775579095][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:51:23][357576775579095][296 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:51:23][357576775579095][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:51:23][357576775579095][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:51:23][357576775579095][343 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 03:51:23][357576775579095][343 ms][DEBUG] rawBody.length=1161 [2025-08-22 03:51:23][357576775579095][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576775579095\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX80BJH1L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4982\"}'\'' -e'"" [2025-08-22 03:51:23][357576775579095][343 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:51:23][357576775579095][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576775579095\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX80BJH1L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4982\"}'\'' -e'"" [2025-08-22 03:51:27][357576775579095][3983 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6b26778-c395-4d52-b187-69c5693cefcd","id":"QR_d6b26778-c395-4d52-b187-69c5693cefcd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:51:27][357576775579095][4139 ms][DEBUG] proc_open done in 3795 ms; code=255; res.len=3152 [2025-08-22 03:51:27][357576775579095][4139 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-22 03:51:27][357576775579095][4139 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:51:31][353283323618566][0 ms][INFO] === Request start === [2025-08-22 03:51:31][353283323618566][1 ms][DEBUG] START check_scloud [2025-08-22 03:51:31][353283323618566][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:51:32][353283323618566][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 32322 4994 24466756 195696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:51:32][353283323618566][292 ms][DEBUG] targetPkg: running [2025-08-22 03:51:32][353283323618566][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-22 03:51:32][353283323618566][292 ms][DEBUG] START check_boot_completed [2025-08-22 03:51:32][353283323618566][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:51:32][353283323618566][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:51:32][353283323618566][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:51:32][353283323618566][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 03:51:32][353283323618566][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 03:51:32][353283323618566][401 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:51:32][353283323618566][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283323618566\",\"model\":\"SM-A156U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX32R2JGJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6444\"}'\'' -e'"" [2025-08-22 03:51:32][353283323618566][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:51:32][353283323618566][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353283323618566\",\"model\":\"SM-A156U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX32R2JGJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6444\"}'\'' -e'"" [2025-08-22 03:51:36][353283323618566][5056 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_958fee18-008b-4520-998c-b4a01ba56c3b","id":"QR_958fee18-008b-4520-998c-b4a01ba56c3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:51:37][353283323618566][5213 ms][DEBUG] proc_open done in 4811 ms; code=255; res.len=3152 [2025-08-22 03:51:37][353283323618566][5213 ms][DEBUG] END runCmdUntilRes#1 in 4811 ms [2025-08-22 03:51:37][353283323618566][5213 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:51:39][358132923148406][0 ms][INFO] === Request start === [2025-08-22 03:51:39][358132923148406][1 ms][DEBUG] START check_scloud [2025-08-22 03:51:39][358132923148406][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:51:39][358132923148406][258 ms][DEBUG] SU: done in 256 ms; outu0_a118 32322 4994 24611240 206588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:51:39][358132923148406][258 ms][DEBUG] targetPkg: running [2025-08-22 03:51:39][358132923148406][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-22 03:51:39][358132923148406][258 ms][DEBUG] START check_boot_completed [2025-08-22 03:51:39][358132923148406][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:51:39][358132923148406][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:51:39][358132923148406][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:51:39][358132923148406][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:51:39][358132923148406][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 03:51:39][358132923148406][351 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:51:39][358132923148406][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358132923148406\",\"model\":\"SM-S908U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW51S3JQT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2503\"}'\'' -e'"" [2025-08-22 03:51:39][358132923148406][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:51:39][358132923148406][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358132923148406\",\"model\":\"SM-S908U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW51S3JQT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2503\"}'\'' -e'"" [2025-08-22 03:51:45][358132923148406][5834 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99b23f58-6911-4741-81e4-c8a47e26107e","id":"QR_99b23f58-6911-4741-81e4-c8a47e26107e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:51:45][358132923148406][5991 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3152 [2025-08-22 03:51:45][358132923148406][5991 ms][DEBUG] END runCmdUntilRes#1 in 5639 ms [2025-08-22 03:51:45][358132923148406][5991 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:52:24][359156941511120][0 ms][INFO] === Request start === [2025-08-22 03:52:24][359156941511120][1 ms][DEBUG] START check_scloud [2025-08-22 03:52:24][359156941511120][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:52:24][359156941511120][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 32322 4994 24710596 218656 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:52:24][359156941511120][303 ms][DEBUG] targetPkg: running [2025-08-22 03:52:24][359156941511120][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 03:52:24][359156941511120][303 ms][DEBUG] START check_boot_completed [2025-08-22 03:52:24][359156941511120][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:52:24][359156941511120][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 03:52:24][359156941511120][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:52:25][359156941511120][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:52:25][359156941511120][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 03:52:25][359156941511120][397 ms][DEBUG] START check_internet [2025-08-22 03:52:25][359156941511120][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:52:25][359156941511120][771 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.619/230.619/230.619/0.000 ms\n [2025-08-22 03:52:25][359156941511120][771 ms][DEBUG] check_internet: online [2025-08-22 03:52:25][359156941511120][771 ms][DEBUG] END check_internet in 375 ms [2025-08-22 03:52:25][359156941511120][771 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:52:25][359156941511120][772 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156941511120\",\"model\":\"SM-A155M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X20JTVHD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1008\"}'\'' -e'"" [2025-08-22 03:52:25][359156941511120][772 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:52:25][359156941511120][772 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156941511120\",\"model\":\"SM-A155M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X20JTVHD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1008\"}'\'' -e'"" [2025-08-22 03:52:31][359156941511120][6739 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36696fbd-883d-40b6-a433-1bb9f76e7340","id":"QR_36696fbd-883d-40b6-a433-1bb9f76e7340","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:52:31][359156941511120][6895 ms][DEBUG] proc_open done in 6123 ms; code=255; res.len=3152 [2025-08-22 03:52:31][359156941511120][6895 ms][DEBUG] END runCmdUntilRes#1 in 6123 ms [2025-08-22 03:52:31][359156941511120][6895 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:52:43][351007060638178][1 ms][INFO] === Request start === [2025-08-22 03:52:43][351007060638178][2 ms][DEBUG] START check_scloud [2025-08-22 03:52:43][351007060638178][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:52:43][351007060638178][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 32322 4994 24855244 229588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:52:43][351007060638178][310 ms][DEBUG] targetPkg: running [2025-08-22 03:52:43][351007060638178][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-22 03:52:43][351007060638178][310 ms][DEBUG] START check_boot_completed [2025-08-22 03:52:43][351007060638178][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:52:43][351007060638178][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 03:52:43][351007060638178][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:52:43][351007060638178][405 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 03:52:43][351007060638178][405 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 03:52:43][351007060638178][405 ms][DEBUG] START check_internet [2025-08-22 03:52:43][351007060638178][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:52:44][351007060638178][794 ms][DEBUG] SU: done in 389 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.435/270.435/270.435/0.000 ms\n [2025-08-22 03:52:44][351007060638178][794 ms][DEBUG] check_internet: online [2025-08-22 03:52:44][351007060638178][794 ms][DEBUG] END check_internet in 389 ms [2025-08-22 03:52:44][351007060638178][794 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:52:44][351007060638178][794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007060638178\",\"model\":\"SM-A356E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX40AFRQD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7400\"}'\'' -e'"" [2025-08-22 03:52:44][351007060638178][794 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:52:44][351007060638178][794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007060638178\",\"model\":\"SM-A356E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX40AFRQD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7400\"}'\'' -e'"" [2025-08-22 03:52:50][351007060638178][7167 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5487187c-e861-49d8-8452-5e065642c5f0","id":"QR_5487187c-e861-49d8-8452-5e065642c5f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:52:50][351007060638178][7323 ms][DEBUG] proc_open done in 6529 ms; code=255; res.len=3152 [2025-08-22 03:52:50][351007060638178][7323 ms][DEBUG] END runCmdUntilRes#1 in 6529 ms [2025-08-22 03:52:50][351007060638178][7323 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:52:51][351007067289082][0 ms][INFO] === Request start === [2025-08-22 03:52:51][351007067289082][1 ms][DEBUG] START check_scloud [2025-08-22 03:52:51][351007067289082][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:52:51][351007067289082][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 32322 4994 24987568 241776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:52:51][351007067289082][315 ms][DEBUG] targetPkg: running [2025-08-22 03:52:51][351007067289082][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 03:52:51][351007067289082][315 ms][DEBUG] START check_boot_completed [2025-08-22 03:52:51][351007067289082][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:52:52][351007067289082][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 03:52:52][351007067289082][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:52:52][351007067289082][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 03:52:52][351007067289082][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 03:52:52][351007067289082][424 ms][DEBUG] START check_internet [2025-08-22 03:52:52][351007067289082][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 03:52:52][351007067289082][752 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.775/240.775/240.775/0.000 ms\n [2025-08-22 03:52:52][351007067289082][752 ms][DEBUG] check_internet: online [2025-08-22 03:52:52][351007067289082][752 ms][DEBUG] END check_internet in 328 ms [2025-08-22 03:52:52][351007067289082][752 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:52:52][351007067289082][752 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007067289082\",\"model\":\"SM-A356E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCXB09DDAY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8457\"}'\'' -e'"" [2025-08-22 03:52:52][351007067289082][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:52:52][351007067289082][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007067289082\",\"model\":\"SM-A356E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCXB09DDAY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8457\"}'\'' -e'"" [2025-08-22 03:52:56][351007067289082][4439 ms][DEBUG] proc_open done in 3687 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 03:52:56][351007067289082][4439 ms][DEBUG] END runCmdUntilRes#1 in 3687 ms [2025-08-22 03:52:56][351007067289082][4439 ms][WARN] Detected error: Process with pid 32322 either refused to load frida-agent, or terminated during injection [2025-08-22 03:52:56][351007067289082][4439 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 03:52:56][351007067289082][4564 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 03:52:56][351007067289082][4564 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 03:52:56][351007067289082][4564 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 03:52:56][351007067289082][4689 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 03:52:56][351007067289082][4689 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 03:52:56][351007067289082][4845 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 03:52:58][351007067289082][6860 ms][DEBUG] START check_boot_completed [2025-08-22 03:52:58][351007067289082][6860 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:52:58][351007067289082][6907 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 03:52:58][351007067289082][6907 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:52:58][351007067289082][6954 ms][DEBUG] SU: done in 46 ms; out [2025-08-22 03:52:58][351007067289082][6954 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 03:53:01][351007067289082][9969 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 03:53:01][351007067289082][9969 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351007067289082\",\"model\":\"SM-A356E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCXB09DDAY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8457\"}'\'' -e'"" [2025-08-22 03:53:08][351007067289082][16452 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a51fff8c-b5a6-4e6e-9f3d-b726fdaaf4d9","id":"QR_a51fff8c-b5a6-4e6e-9f3d-b726fdaaf4d9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:53:08][351007067289082][16608 ms][DEBUG] proc_open done in 6639 ms; code=255; res.len=3152 [2025-08-22 03:53:08][351007067289082][16608 ms][DEBUG] END runCmdUntilRes#2 in 6639 ms [2025-08-22 03:53:08][351007067289082][16608 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:53:09][351123901786033][0 ms][INFO] === Request start === [2025-08-22 03:53:09][351123901786033][0 ms][DEBUG] START check_scloud [2025-08-22 03:53:09][351123901786033][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:53:09][351123901786033][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 1900 4994 23737720 123676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:53:09][351123901786033][246 ms][DEBUG] targetPkg: running [2025-08-22 03:53:09][351123901786033][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-22 03:53:09][351123901786033][246 ms][DEBUG] START check_boot_completed [2025-08-22 03:53:09][351123901786033][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:53:09][351123901786033][277 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 03:53:09][351123901786033][277 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:53:09][351123901786033][324 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 03:53:09][351123901786033][324 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 03:53:09][351123901786033][324 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:53:09][351123901786033][324 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901786033\",\"model\":\"SM-A346M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW313N9KX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8048\"}'\'' -e'"" [2025-08-22 03:53:09][351123901786033][324 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:53:09][351123901786033][324 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901786033\",\"model\":\"SM-A346M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW313N9KX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8048\"}'\'' -e'"" [2025-08-22 03:53:14][351123901786033][4526 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6c31ff12-b37f-4a0e-b6b8-cf0b70c19111","id":"QR_6c31ff12-b37f-4a0e-b6b8-cf0b70c19111","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:53:14][351123901786033][4682 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3152 [2025-08-22 03:53:14][351123901786033][4682 ms][DEBUG] END runCmdUntilRes#1 in 4359 ms [2025-08-22 03:53:14][351123901786033][4682 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 03:57:21][352218222236822][1 ms][INFO] === Request start === [2025-08-22 03:57:21][352218222236822][2 ms][DEBUG] START check_scloud [2025-08-22 03:57:21][352218222236822][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 03:57:22][352218222236822][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 1900 4994 23775432 137740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 03:57:22][352218222236822][301 ms][DEBUG] targetPkg: running [2025-08-22 03:57:22][352218222236822][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 03:57:22][352218222236822][301 ms][DEBUG] START check_boot_completed [2025-08-22 03:57:22][352218222236822][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 03:57:22][352218222236822][331 ms][DEBUG] ADB: done in 30 ms; out [2025-08-22 03:57:22][352218222236822][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 03:57:22][352218222236822][379 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 03:57:22][352218222236822][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 03:57:22][352218222236822][379 ms][DEBUG] rawBody.length=1160 [2025-08-22 03:57:22][352218222236822][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352218222236822\",\"model\":\"SM-F946W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCWA1MQ6RT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8982\"}'\'' -e'"" [2025-08-22 03:57:22][352218222236822][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 03:57:22][352218222236822][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352218222236822\",\"model\":\"SM-F946W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCWA1MQ6RT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8982\"}'\'' -e'"" [2025-08-22 03:57:27][352218222236822][5923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2e4e862-d2af-4b25-9b00-085851a08ae7","id":"QR_b2e4e862-d2af-4b25-9b00-085851a08ae7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 03:57:27][352218222236822][6080 ms][DEBUG] proc_open done in 5701 ms; code=255; res.len=3152 [2025-08-22 03:57:27][352218222236822][6080 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-08-22 03:57:27][352218222236822][6080 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:07:37][352655895029002][1 ms][INFO] === Request start === [2025-08-22 04:07:37][352655895029002][2 ms][DEBUG] START check_scloud [2025-08-22 04:07:37][352655895029002][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:07:37][352655895029002][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 1900 4994 23863520 149244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:07:37][352655895029002][315 ms][DEBUG] targetPkg: running [2025-08-22 04:07:37][352655895029002][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 04:07:37][352655895029002][315 ms][DEBUG] START check_boot_completed [2025-08-22 04:07:37][352655895029002][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:07:37][352655895029002][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 04:07:37][352655895029002][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:07:37][352655895029002][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:07:37][352655895029002][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 04:07:37][352655895029002][408 ms][DEBUG] rawBody.length=1160 [2025-08-22 04:07:37][352655895029002][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352655895029002\",\"model\":\"SM-A546U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCW91Q0ENR\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2593\"}'\'' -e'"" [2025-08-22 04:07:37][352655895029002][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:07:37][352655895029002][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352655895029002\",\"model\":\"SM-A546U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCW91Q0ENR\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2593\"}'\'' -e'"" [2025-08-22 04:07:42][352655895029002][5938 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92a1aff1-e61e-4f67-842d-ea2d160e82e0","id":"QR_92a1aff1-e61e-4f67-842d-ea2d160e82e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:07:43][352655895029002][6094 ms][DEBUG] proc_open done in 5686 ms; code=255; res.len=3152 [2025-08-22 04:07:43][352655895029002][6094 ms][DEBUG] END runCmdUntilRes#1 in 5686 ms [2025-08-22 04:07:43][352655895029002][6094 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:09:37][358283465028884][1 ms][INFO] === Request start === [2025-08-22 04:09:37][358283465028884][2 ms][DEBUG] START check_scloud [2025-08-22 04:09:37][358283465028884][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:09:37][358283465028884][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 1900 4994 23990736 161000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:09:37][358283465028884][265 ms][DEBUG] targetPkg: running [2025-08-22 04:09:37][358283465028884][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-22 04:09:37][358283465028884][265 ms][DEBUG] START check_boot_completed [2025-08-22 04:09:37][358283465028884][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:09:37][358283465028884][296 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 04:09:37][358283465028884][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:09:37][358283465028884][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:09:37][358283465028884][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 04:09:37][358283465028884][343 ms][DEBUG] rawBody.length=1159 [2025-08-22 04:09:37][358283465028884][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358283465028884\",\"model\":\"SM-P619\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX2W6017BEY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7488\"}'\'' -e'"" [2025-08-22 04:09:37][358283465028884][343 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:09:37][358283465028884][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358283465028884\",\"model\":\"SM-P619\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX2W6017BEY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7488\"}'\'' -e'"" [2025-08-22 04:09:43][358283465028884][6045 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_936409cd-0a63-4762-a7a8-a4520991a4bb","id":"QR_936409cd-0a63-4762-a7a8-a4520991a4bb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:09:43][358283465028884][6201 ms][DEBUG] proc_open done in 5858 ms; code=255; res.len=3152 [2025-08-22 04:09:43][358283465028884][6201 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-08-22 04:09:43][358283465028884][6201 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:13:35][351874531287079][1 ms][INFO] === Request start === [2025-08-22 04:13:35][351874531287079][2 ms][DEBUG] START check_scloud [2025-08-22 04:13:35][351874531287079][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:13:35][351874531287079][294 ms][DEBUG] SU: done in 292 ms; outu0_a118 1900 4994 24110644 171904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:13:35][351874531287079][294 ms][DEBUG] targetPkg: running [2025-08-22 04:13:35][351874531287079][294 ms][DEBUG] END check_scloud in 292 ms [2025-08-22 04:13:35][351874531287079][294 ms][DEBUG] START check_boot_completed [2025-08-22 04:13:35][351874531287079][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:13:35][351874531287079][340 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 04:13:35][351874531287079][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:13:36][351874531287079][402 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 04:13:36][351874531287079][402 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-22 04:13:36][351874531287079][402 ms][DEBUG] rawBody.length=1160 [2025-08-22 04:13:36][351874531287079][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351874531287079\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX50YAS4Z\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7803\"}'\'' -e'"" [2025-08-22 04:13:36][351874531287079][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:13:36][351874531287079][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351874531287079\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX50YAS4Z\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7803\"}'\'' -e'"" [2025-08-22 04:13:42][351874531287079][6963 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f27a4f7-5039-4a9a-9347-e667b24dbaea","id":"QR_3f27a4f7-5039-4a9a-9347-e667b24dbaea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:13:42][351874531287079][7119 ms][DEBUG] proc_open done in 6717 ms; code=255; res.len=3152 [2025-08-22 04:13:42][351874531287079][7119 ms][DEBUG] END runCmdUntilRes#1 in 6717 ms [2025-08-22 04:13:42][351874531287079][7119 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:16:06][356591851122521][1 ms][INFO] === Request start === [2025-08-22 04:16:06][356591851122521][2 ms][DEBUG] START check_scloud [2025-08-22 04:16:06][356591851122521][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:16:06][356591851122521][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 1900 4994 24234136 183924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:16:06][356591851122521][299 ms][DEBUG] targetPkg: running [2025-08-22 04:16:06][356591851122521][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 04:16:06][356591851122521][299 ms][DEBUG] START check_boot_completed [2025-08-22 04:16:06][356591851122521][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:16:06][356591851122521][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 04:16:06][356591851122521][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:16:06][356591851122521][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 04:16:06][356591851122521][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 04:16:06][356591851122521][408 ms][DEBUG] START check_internet [2025-08-22 04:16:06][356591851122521][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 04:16:07][356591851122521][877 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.523/199.523/199.523/0.000 ms\n [2025-08-22 04:16:07][356591851122521][877 ms][DEBUG] check_internet: online [2025-08-22 04:16:07][356591851122521][877 ms][DEBUG] END check_internet in 469 ms [2025-08-22 04:16:07][356591851122521][877 ms][DEBUG] rawBody.length=1161 [2025-08-22 04:16:07][356591851122521][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356591851122521\",\"model\":\"SM-S918N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW205FSQP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5087\"}'\'' -e'"" [2025-08-22 04:16:07][356591851122521][878 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:16:07][356591851122521][878 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356591851122521\",\"model\":\"SM-S918N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW205FSQP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5087\"}'\'' -e'"" [2025-08-22 04:16:16][356591851122521][9703 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30e63414-a7ba-4e36-9e8b-96b03a7f6796","id":"QR_30e63414-a7ba-4e36-9e8b-96b03a7f6796","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:16:16][356591851122521][9859 ms][DEBUG] proc_open done in 8981 ms; code=255; res.len=3152 [2025-08-22 04:16:16][356591851122521][9859 ms][DEBUG] END runCmdUntilRes#1 in 8982 ms [2025-08-22 04:16:16][356591851122521][9859 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:25:07][358438733658587][1 ms][INFO] === Request start === [2025-08-22 04:25:07][358438733658587][2 ms][DEBUG] START check_scloud [2025-08-22 04:25:07][358438733658587][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:25:07][358438733658587][265 ms][DEBUG] SU: done in 263 ms; outu0_a118 1900 4994 24354096 195512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:25:07][358438733658587][265 ms][DEBUG] targetPkg: running [2025-08-22 04:25:07][358438733658587][265 ms][DEBUG] END check_scloud in 263 ms [2025-08-22 04:25:07][358438733658587][265 ms][DEBUG] START check_boot_completed [2025-08-22 04:25:07][358438733658587][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:25:07][358438733658587][296 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 04:25:07][358438733658587][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:25:07][358438733658587][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:25:07][358438733658587][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 04:25:07][358438733658587][343 ms][DEBUG] rawBody.length=1161 [2025-08-22 04:25:07][358438733658587][343 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438733658587\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5060\"}'\'' -e'"" [2025-08-22 04:25:07][358438733658587][343 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:25:07][358438733658587][343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438733658587\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5060\"}'\'' -e'"" [2025-08-22 04:25:11][358438733658587][4076 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 04:25:11][358438733658587][4233 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=115 [2025-08-22 04:25:11][358438733658587][4233 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-22 04:25:11][358438733658587][4233 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 04:25:11][][0 ms][INFO] === Request start === [2025-08-22 04:25:11][][1 ms][DEBUG] START check_scloud [2025-08-22 04:25:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:25:11][][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 1900 4994 24542852 206052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:25:11][][260 ms][DEBUG] targetPkg: running [2025-08-22 04:25:11][][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-22 04:25:11][][260 ms][DEBUG] START check_boot_completed [2025-08-22 04:25:11][][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:25:11][][306 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 04:25:11][][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:25:11][][353 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:25:11][][353 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 04:25:11][][353 ms][DEBUG] rawBody.length=1131 [2025-08-22 04:25:11][][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5605\"}'\'' -e'"" [2025-08-22 04:25:11][][353 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:25:11][][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5605\"}'\'' -e'"" [2025-08-22 04:25:15][][3758 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 04:25:15][][3914 ms][DEBUG] proc_open done in 3561 ms; code=255; res.len=107 [2025-08-22 04:25:15][][3914 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-22 04:25:15][][3914 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 04:25:15][][0 ms][INFO] === Request start === [2025-08-22 04:25:15][][1 ms][DEBUG] START check_scloud [2025-08-22 04:25:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:25:16][][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 1900 4994 24693644 217892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:25:16][][292 ms][DEBUG] targetPkg: running [2025-08-22 04:25:16][][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-22 04:25:16][][292 ms][DEBUG] START check_boot_completed [2025-08-22 04:25:16][][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:25:16][][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 04:25:16][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:25:16][][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:25:16][][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 04:25:16][][386 ms][DEBUG] rawBody.length=1131 [2025-08-22 04:25:16][][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8588\"}'\'' -e'"" [2025-08-22 04:25:16][][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:25:16][][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8588\"}'\'' -e'"" [2025-08-22 04:25:19][][3807 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 04:25:19][][3963 ms][DEBUG] proc_open done in 3576 ms; code=255; res.len=107 [2025-08-22 04:25:19][][3963 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-22 04:25:19][][3963 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 04:25:21][358438733658587][0 ms][INFO] === Request start === [2025-08-22 04:25:21][358438733658587][1 ms][DEBUG] START check_scloud [2025-08-22 04:25:21][358438733658587][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:25:22][358438733658587][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 1900 4994 24818764 229648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:25:22][358438733658587][262 ms][DEBUG] targetPkg: running [2025-08-22 04:25:22][358438733658587][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-22 04:25:22][358438733658587][263 ms][DEBUG] START check_boot_completed [2025-08-22 04:25:22][358438733658587][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:25:22][358438733658587][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 04:25:22][358438733658587][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:25:22][358438733658587][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:25:22][358438733658587][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 04:25:22][358438733658587][356 ms][DEBUG] rawBody.length=1160 [2025-08-22 04:25:22][358438733658587][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438733658587\",\"model\":\"SM-A155F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5337\"}'\'' -e'"" [2025-08-22 04:25:22][358438733658587][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:25:22][358438733658587][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438733658587\",\"model\":\"SM-A155F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5337\"}'\'' -e'"" [2025-08-22 04:25:28][358438733658587][6433 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73f376da-0c02-4f88-aab2-bbf088945ec3","id":"QR_73f376da-0c02-4f88-aab2-bbf088945ec3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:25:28][358438733658587][6589 ms][DEBUG] proc_open done in 6233 ms; code=255; res.len=3152 [2025-08-22 04:25:28][358438733658587][6589 ms][DEBUG] END runCmdUntilRes#1 in 6233 ms [2025-08-22 04:25:28][358438733658587][6589 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:30:46][355824558078634][1 ms][INFO] === Request start === [2025-08-22 04:30:46][355824558078634][2 ms][DEBUG] START check_scloud [2025-08-22 04:30:46][355824558078634][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:30:46][355824558078634][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 1900 4994 24891592 240808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:30:46][355824558078634][264 ms][DEBUG] targetPkg: running [2025-08-22 04:30:46][355824558078634][264 ms][DEBUG] END check_scloud in 262 ms [2025-08-22 04:30:46][355824558078634][264 ms][DEBUG] START check_boot_completed [2025-08-22 04:30:46][355824558078634][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:30:46][355824558078634][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 04:30:46][355824558078634][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:30:46][355824558078634][342 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:30:46][355824558078634][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 04:30:46][355824558078634][342 ms][DEBUG] START check_internet [2025-08-22 04:30:46][355824558078634][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 04:30:47][355824558078634][873 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.278/201.278/201.278/0.000 ms\n [2025-08-22 04:30:47][355824558078634][873 ms][DEBUG] check_internet: online [2025-08-22 04:30:47][355824558078634][873 ms][DEBUG] END check_internet in 531 ms [2025-08-22 04:30:47][355824558078634][873 ms][DEBUG] rawBody.length=1160 [2025-08-22 04:30:47][355824558078634][873 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00Q9NJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9857\"}'\'' -e'"" [2025-08-22 04:30:47][355824558078634][873 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:30:47][355824558078634][873 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00Q9NJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9857\"}'\'' -e'"" [2025-08-22 04:30:51][355824558078634][5247 ms][DEBUG] proc_open done in 4374 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 04:30:51][355824558078634][5247 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-22 04:30:51][355824558078634][5247 ms][WARN] Detected error: Process with pid 1900 either refused to load frida-agent, or terminated during injection [2025-08-22 04:30:51][355824558078634][5247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 04:30:51][355824558078634][5403 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 04:30:51][355824558078634][5403 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 04:30:51][355824558078634][5403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 04:30:51][355824558078634][5544 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 04:30:51][355824558078634][5544 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 04:30:51][355824558078634][5762 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 04:30:53][355824558078634][7777 ms][DEBUG] START check_boot_completed [2025-08-22 04:30:53][355824558078634][7777 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:30:54][355824558078634][7824 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 04:30:54][355824558078634][7824 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:30:54][355824558078634][7872 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 04:30:54][355824558078634][7872 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 04:30:57][355824558078634][10886 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 04:30:57][355824558078634][10886 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824558078634\",\"model\":\"SM-A155M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00Q9NJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9857\"}'\'' -e'"" [2025-08-22 04:31:04][355824558078634][18087 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1c561790-e998-4914-92f7-70898f350a47","id":"QR_1c561790-e998-4914-92f7-70898f350a47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:31:04][355824558078634][18244 ms][DEBUG] proc_open done in 7357 ms; code=255; res.len=3152 [2025-08-22 04:31:04][355824558078634][18244 ms][DEBUG] END runCmdUntilRes#2 in 7358 ms [2025-08-22 04:31:04][355824558078634][18244 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:35:08][350828560159089][1 ms][INFO] === Request start === [2025-08-22 04:35:08][350828560159089][2 ms][DEBUG] START check_scloud [2025-08-22 04:35:08][350828560159089][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:35:08][350828560159089][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 4133 4994 23591840 126664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:35:08][350828560159089][316 ms][DEBUG] targetPkg: running [2025-08-22 04:35:08][350828560159089][316 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 04:35:08][350828560159089][316 ms][DEBUG] START check_boot_completed [2025-08-22 04:35:08][350828560159089][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:35:08][350828560159089][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 04:35:08][350828560159089][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:35:09][350828560159089][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:35:09][350828560159089][409 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 04:35:09][350828560159089][409 ms][DEBUG] rawBody.length=1160 [2025-08-22 04:35:09][350828560159089][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828560159089\",\"model\":\"SM-S918B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCW105Z8MY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7151\"}'\'' -e'"" [2025-08-22 04:35:09][350828560159089][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:35:09][350828560159089][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350828560159089\",\"model\":\"SM-S918B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCW105Z8MY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7151\"}'\'' -e'"" [2025-08-22 04:35:14][350828560159089][5939 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30bb5a18-c6f1-4a90-a152-4d3ab401496c","id":"QR_30bb5a18-c6f1-4a90-a152-4d3ab401496c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:35:14][350828560159089][6095 ms][DEBUG] proc_open done in 5686 ms; code=255; res.len=3152 [2025-08-22 04:35:14][350828560159089][6095 ms][DEBUG] END runCmdUntilRes#1 in 5686 ms [2025-08-22 04:35:14][350828560159089][6095 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:36:05][351240643456145][0 ms][INFO] === Request start === [2025-08-22 04:36:05][351240643456145][1 ms][DEBUG] START check_scloud [2025-08-22 04:36:05][351240643456145][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:36:05][351240643456145][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 4133 4994 23738180 137760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:36:05][351240643456145][310 ms][DEBUG] targetPkg: running [2025-08-22 04:36:05][351240643456145][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 04:36:05][351240643456145][310 ms][DEBUG] START check_boot_completed [2025-08-22 04:36:05][351240643456145][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:36:05][351240643456145][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 04:36:05][351240643456145][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:36:05][351240643456145][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 04:36:05][351240643456145][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 04:36:05][351240643456145][419 ms][DEBUG] START check_internet [2025-08-22 04:36:05][351240643456145][419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 04:36:06][351240643456145][1013 ms][DEBUG] SU: done in 594 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.942/200.942/200.942/0.000 ms\n [2025-08-22 04:36:06][351240643456145][1013 ms][DEBUG] check_internet: online [2025-08-22 04:36:06][351240643456145][1013 ms][DEBUG] END check_internet in 594 ms [2025-08-22 04:36:06][351240643456145][1013 ms][DEBUG] rawBody.length=1161 [2025-08-22 04:36:06][351240643456145][1013 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643456145\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W90RHXFZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2313\"}'\'' -e'"" [2025-08-22 04:36:06][351240643456145][1013 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:36:06][351240643456145][1013 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240643456145\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W90RHXFZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2313\"}'\'' -e'"" [2025-08-22 04:36:10][356414818640909][0 ms][INFO] === Request start === [2025-08-22 04:36:10][351240643456145][4965 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_15d31569-b8d2-4846-92e5-d8af7fafd6df","id":"QR_15d31569-b8d2-4846-92e5-d8af7fafd6df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:36:10][351240643456145][5121 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3152 [2025-08-22 04:36:10][351240643456145][5121 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-22 04:36:10][351240643456145][5121 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:36:11][356414818640909][1011 ms][DEBUG] START check_scloud [2025-08-22 04:36:11][356414818640909][1011 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:36:11][356414818640909][1261 ms][DEBUG] SU: done in 250 ms; outu0_a118 4133 4994 23861964 149004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:36:11][356414818640909][1261 ms][DEBUG] targetPkg: running [2025-08-22 04:36:11][356414818640909][1261 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 04:36:11][356414818640909][1261 ms][DEBUG] START check_boot_completed [2025-08-22 04:36:11][356414818640909][1261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:36:11][356414818640909][1293 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 04:36:11][356414818640909][1293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:36:11][356414818640909][1339 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:36:11][356414818640909][1339 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 04:36:11][356414818640909][1339 ms][DEBUG] START check_internet [2025-08-22 04:36:11][356414818640909][1339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 04:36:11][356414818640909][1574 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.897/140.897/140.897/0.000 ms\n [2025-08-22 04:36:11][356414818640909][1574 ms][DEBUG] check_internet: online [2025-08-22 04:36:11][356414818640909][1574 ms][DEBUG] END check_internet in 234 ms [2025-08-22 04:36:11][356414818640909][1574 ms][DEBUG] rawBody.length=1161 [2025-08-22 04:36:11][356414818640909][1574 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818640909\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W40F66FR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6432\"}'\'' -e'"" [2025-08-22 04:36:11][356414818640909][1574 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:36:11][356414818640909][1574 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414818640909\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W40F66FR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6432\"}'\'' -e'"" [2025-08-22 04:36:15][356414818640909][5307 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e08f1144-30ee-4689-87a6-599d1f28c6a4","id":"QR_e08f1144-30ee-4689-87a6-599d1f28c6a4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:36:15][356414818640909][5463 ms][DEBUG] proc_open done in 3890 ms; code=255; res.len=3152 [2025-08-22 04:36:15][356414818640909][5463 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-22 04:36:15][356414818640909][5463 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 04:47:07][351386342244108][1 ms][INFO] === Request start === [2025-08-22 04:47:07][351386342244108][2 ms][DEBUG] START check_scloud [2025-08-22 04:47:07][351386342244108][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 04:47:08][351386342244108][260 ms][DEBUG] SU: done in 258 ms; outu0_a118 4133 4994 23974532 160836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 04:47:08][351386342244108][260 ms][DEBUG] targetPkg: running [2025-08-22 04:47:08][351386342244108][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-22 04:47:08][351386342244108][260 ms][DEBUG] START check_boot_completed [2025-08-22 04:47:08][351386342244108][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 04:47:08][351386342244108][291 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 04:47:08][351386342244108][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 04:47:08][351386342244108][338 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 04:47:08][351386342244108][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 04:47:08][351386342244108][338 ms][DEBUG] rawBody.length=1160 [2025-08-22 04:47:08][351386342244108][338 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351386342244108\",\"model\":\"SM-G990W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CTC1H0QFB\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7201\"}'\'' -e'"" [2025-08-22 04:47:08][351386342244108][338 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 04:47:08][351386342244108][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351386342244108\",\"model\":\"SM-G990W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CTC1H0QFB\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7201\"}'\'' -e'"" [2025-08-22 04:47:13][351386342244108][5759 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d8a72fb-3769-48e9-92bb-5e789211b42a","id":"QR_5d8a72fb-3769-48e9-92bb-5e789211b42a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 04:47:13][351386342244108][5915 ms][DEBUG] proc_open done in 5577 ms; code=255; res.len=3152 [2025-08-22 04:47:13][351386342244108][5915 ms][DEBUG] END runCmdUntilRes#1 in 5577 ms [2025-08-22 04:47:13][351386342244108][5915 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:18:37][351828113531452][1 ms][INFO] === Request start === [2025-08-22 05:18:37][351828113531452][2 ms][DEBUG] START check_scloud [2025-08-22 05:18:37][351828113531452][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:18:37][351828113531452][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 4133 4994 24126312 171528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:18:37][351828113531452][255 ms][DEBUG] targetPkg: running [2025-08-22 05:18:37][351828113531452][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-22 05:18:37][351828113531452][256 ms][DEBUG] START check_boot_completed [2025-08-22 05:18:37][351828113531452][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:18:37][351828113531452][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 05:18:37][351828113531452][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:18:37][351828113531452][365 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 05:18:37][351828113531452][365 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 05:18:37][351828113531452][365 ms][DEBUG] START check_internet [2025-08-22 05:18:37][351828113531452][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 05:18:38][351828113531452][880 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.831/202.831/202.831/0.000 ms\n [2025-08-22 05:18:38][351828113531452][880 ms][DEBUG] check_internet: online [2025-08-22 05:18:38][351828113531452][880 ms][DEBUG] END check_internet in 515 ms [2025-08-22 05:18:38][351828113531452][880 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:18:38][351828113531452][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828113531452\",\"model\":\"SM-G988B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CN306LC0L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7947\"}'\'' -e'"" [2025-08-22 05:18:38][351828113531452][880 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:18:38][351828113531452][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828113531452\",\"model\":\"SM-G988B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CN306LC0L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7947\"}'\'' -e'"" [2025-08-22 05:18:42][351828113531452][4848 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed1aaf3c-6832-470f-ae3f-e8a3167f7c95","id":"QR_ed1aaf3c-6832-470f-ae3f-e8a3167f7c95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:18:42][351828113531452][5004 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3152 [2025-08-22 05:18:42][351828113531452][5004 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-22 05:18:42][351828113531452][5004 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:19:20][354529385974746][0 ms][INFO] === Request start === [2025-08-22 05:19:20][354529385974746][1 ms][DEBUG] START check_scloud [2025-08-22 05:19:20][354529385974746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:19:21][354529385974746][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 4133 4994 24265880 183740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:19:21][354529385974746][318 ms][DEBUG] targetPkg: running [2025-08-22 05:19:21][354529385974746][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 05:19:21][354529385974746][318 ms][DEBUG] START check_boot_completed [2025-08-22 05:19:21][354529385974746][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:19:21][354529385974746][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 05:19:21][354529385974746][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:19:21][354529385974746][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 05:19:21][354529385974746][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 05:19:21][354529385974746][412 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:19:21][354529385974746][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529385974746\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8W107EV6T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1040\"}'\'' -e'"" [2025-08-22 05:19:21][354529385974746][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:19:21][354529385974746][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529385974746\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8W107EV6T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1040\"}'\'' -e'"" [2025-08-22 05:19:25][354529385974746][4567 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3d47941f-bdf4-4331-addd-c4131ee44301","id":"QR_3d47941f-bdf4-4331-addd-c4131ee44301","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:19:25][354529385974746][4723 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3152 [2025-08-22 05:19:25][354529385974746][4723 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-22 05:19:25][354529385974746][4723 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:24:02][352923548728788][1 ms][INFO] === Request start === [2025-08-22 05:24:02][352923548728788][2 ms][DEBUG] START check_scloud [2025-08-22 05:24:02][352923548728788][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:24:03][352923548728788][276 ms][DEBUG] SU: done in 274 ms; outu0_a118 4133 4994 24385788 194640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:24:03][352923548728788][276 ms][DEBUG] targetPkg: running [2025-08-22 05:24:03][352923548728788][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-22 05:24:03][352923548728788][276 ms][DEBUG] START check_boot_completed [2025-08-22 05:24:03][352923548728788][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:24:03][352923548728788][322 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 05:24:03][352923548728788][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:24:03][352923548728788][400 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 05:24:03][352923548728788][400 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-22 05:24:03][352923548728788][401 ms][DEBUG] START check_internet [2025-08-22 05:24:03][352923548728788][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 05:24:03][352923548728788][994 ms][DEBUG] SU: done in 593 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=204 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 204.001/204.001/204.001/0.000 ms\n [2025-08-22 05:24:03][352923548728788][994 ms][DEBUG] check_internet: online [2025-08-22 05:24:03][352923548728788][994 ms][DEBUG] END check_internet in 594 ms [2025-08-22 05:24:03][352923548728788][994 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:24:03][352923548728788][994 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923548728788\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB2MYQ1H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2634\"}'\'' -e'"" [2025-08-22 05:24:03][352923548728788][994 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:24:03][352923548728788][994 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352923548728788\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB2MYQ1H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2634\"}'\'' -e'"" [2025-08-22 05:24:08][352923548728788][5102 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9bf7e6da-ef9b-4781-a191-63c9c394862f","id":"QR_9bf7e6da-ef9b-4781-a191-63c9c394862f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:24:08][352923548728788][5258 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3152 [2025-08-22 05:24:08][352923548728788][5258 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-22 05:24:08][352923548728788][5259 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:37:06][352737403180830][1 ms][INFO] === Request start === [2025-08-22 05:37:06][352737403180830][2 ms][DEBUG] START check_scloud [2025-08-22 05:37:06][352737403180830][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:37:06][352737403180830][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 4133 4994 24488212 205472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:37:06][352737403180830][298 ms][DEBUG] targetPkg: running [2025-08-22 05:37:06][352737403180830][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 05:37:06][352737403180830][298 ms][DEBUG] START check_boot_completed [2025-08-22 05:37:06][352737403180830][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:37:06][352737403180830][330 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 05:37:06][352737403180830][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:37:06][352737403180830][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 05:37:06][352737403180830][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 05:37:06][352737403180830][377 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:37:06][352737403180830][377 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737403180830\",\"model\":\"SM-S926B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX9045GLR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8618\"}'\'' -e'"" [2025-08-22 05:37:06][352737403180830][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:37:06][352737403180830][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737403180830\",\"model\":\"SM-S926B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX9045GLR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8618\"}'\'' -e'"" [2025-08-22 05:37:11][352737403180830][5063 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f275ea93-8c30-487d-93dc-a7364e744222","id":"QR_f275ea93-8c30-487d-93dc-a7364e744222","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:37:11][352737403180830][5219 ms][DEBUG] proc_open done in 4842 ms; code=255; res.len=3152 [2025-08-22 05:37:11][352737403180830][5219 ms][DEBUG] END runCmdUntilRes#1 in 4842 ms [2025-08-22 05:37:11][352737403180830][5219 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:44:06][353684141692370][0 ms][INFO] === Request start === [2025-08-22 05:44:06][353684141692370][0 ms][DEBUG] START check_scloud [2025-08-22 05:44:06][353684141692370][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:44:06][353684141692370][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 4133 4994 24648696 217196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:44:06][353684141692370][312 ms][DEBUG] targetPkg: running [2025-08-22 05:44:06][353684141692370][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 05:44:06][353684141692370][312 ms][DEBUG] START check_boot_completed [2025-08-22 05:44:06][353684141692370][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:44:06][353684141692370][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 05:44:06][353684141692370][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:44:06][353684141692370][407 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 05:44:06][353684141692370][407 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 05:44:06][353684141692370][407 ms][DEBUG] START check_internet [2025-08-22 05:44:06][353684141692370][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 05:44:07][353684141692370][921 ms][DEBUG] SU: done in 513 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.538/201.538/201.538/0.000 ms\n [2025-08-22 05:44:07][353684141692370][921 ms][DEBUG] check_internet: online [2025-08-22 05:44:07][353684141692370][921 ms][DEBUG] END check_internet in 514 ms [2025-08-22 05:44:07][353684141692370][921 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:44:07][353684141692370][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141692370\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y609BYPF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6563\"}'\'' -e'"" [2025-08-22 05:44:07][353684141692370][921 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:44:07][353684141692370][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684141692370\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y609BYPF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6563\"}'\'' -e'"" [2025-08-22 05:44:11][353684141692370][5060 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_764a1244-e2ad-404a-ba4b-699ef2af6a46","id":"QR_764a1244-e2ad-404a-ba4b-699ef2af6a46","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:44:11][353684141692370][5217 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3152 [2025-08-22 05:44:11][353684141692370][5217 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-22 05:44:11][353684141692370][5217 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:49:06][353074281415495][1 ms][INFO] === Request start === [2025-08-22 05:49:06][353074281415495][2 ms][DEBUG] START check_scloud [2025-08-22 05:49:06][353074281415495][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:49:06][353074281415495][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 4133 4994 24786088 227388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:49:06][353074281415495][308 ms][DEBUG] targetPkg: running [2025-08-22 05:49:06][353074281415495][308 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 05:49:06][353074281415495][308 ms][DEBUG] START check_boot_completed [2025-08-22 05:49:06][353074281415495][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:49:06][353074281415495][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 05:49:06][353074281415495][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:49:06][353074281415495][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 05:49:06][353074281415495][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 05:49:06][353074281415495][386 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:49:06][353074281415495][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281415495\",\"model\":\"SM-S908B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22ESZ2D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8716\"}'\'' -e'"" [2025-08-22 05:49:06][353074281415495][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:49:06][353074281415495][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074281415495\",\"model\":\"SM-S908B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22ESZ2D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8716\"}'\'' -e'"" [2025-08-22 05:49:10][353074281415495][4307 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dcd9b2e2-d3f0-4e55-a5d9-65eb7addbc35","id":"QR_dcd9b2e2-d3f0-4e55-a5d9-65eb7addbc35","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:49:10][353074281415495][4463 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3152 [2025-08-22 05:49:10][353074281415495][4463 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-22 05:49:10][353074281415495][4463 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:52:19][355347582543662][1 ms][INFO] === Request start === [2025-08-22 05:52:19][355347582543662][2 ms][DEBUG] START check_scloud [2025-08-22 05:52:19][355347582543662][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:52:20][355347582543662][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 4133 4994 24916364 239568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:52:20][355347582543662][314 ms][DEBUG] targetPkg: running [2025-08-22 05:52:20][355347582543662][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 05:52:20][355347582543662][314 ms][DEBUG] START check_boot_completed [2025-08-22 05:52:20][355347582543662][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:52:20][355347582543662][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 05:52:20][355347582543662][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:52:20][355347582543662][409 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 05:52:20][355347582543662][409 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-22 05:52:20][355347582543662][409 ms][DEBUG] START check_internet [2025-08-22 05:52:20][355347582543662][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 05:52:20][355347582543662][907 ms][DEBUG] SU: done in 498 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.678/202.678/202.678/0.000 ms\n [2025-08-22 05:52:20][355347582543662][907 ms][DEBUG] check_internet: online [2025-08-22 05:52:20][355347582543662][907 ms][DEBUG] END check_internet in 498 ms [2025-08-22 05:52:20][355347582543662][907 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:52:20][355347582543662][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355347582543662\",\"model\":\"SM-N981N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN80230YY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4494\"}'\'' -e'"" [2025-08-22 05:52:20][355347582543662][908 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:52:20][355347582543662][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355347582543662\",\"model\":\"SM-N981N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN80230YY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4494\"}'\'' -e'"" [2025-08-22 05:52:24][355347582543662][4657 ms][DEBUG] proc_open done in 3749 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 05:52:24][355347582543662][4657 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-22 05:52:24][355347582543662][4657 ms][WARN] Detected error: Process with pid 4133 either refused to load frida-agent, or terminated during injection [2025-08-22 05:52:24][355347582543662][4657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 05:52:24][355347582543662][4812 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 05:52:24][355347582543662][4812 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 05:52:24][355347582543662][4812 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 05:52:24][355347582543662][4937 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 05:52:24][355347582543662][4938 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 05:52:25][355347582543662][5095 ms][DEBUG] SU: done in 158 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 05:52:27][355347582543662][7109 ms][DEBUG] START check_boot_completed [2025-08-22 05:52:27][355347582543662][7109 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:52:27][355347582543662][7156 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 05:52:27][355347582543662][7156 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:52:27][355347582543662][7218 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 05:52:27][355347582543662][7218 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 05:52:30][355347582543662][10233 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 05:52:30][355347582543662][10233 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355347582543662\",\"model\":\"SM-N981N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN80230YY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4494\"}'\'' -e'"" [2025-08-22 05:52:34][355347582543662][14326 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aaf6e941-10d2-4028-9fe9-585eeb0c4bb2","id":"QR_aaf6e941-10d2-4028-9fe9-585eeb0c4bb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:52:34][355347582543662][14482 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3152 [2025-08-22 05:52:34][355347582543662][14482 ms][DEBUG] END runCmdUntilRes#2 in 4249 ms [2025-08-22 05:52:34][355347582543662][14482 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:52:40][352485222079151][0 ms][INFO] === Request start === [2025-08-22 05:52:40][352485222079151][1 ms][DEBUG] START check_scloud [2025-08-22 05:52:40][352485222079151][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:52:41][352485222079151][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 8453 4994 23776476 123584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:52:41][352485222079151][262 ms][DEBUG] targetPkg: running [2025-08-22 05:52:41][352485222079151][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-22 05:52:41][352485222079151][262 ms][DEBUG] START check_boot_completed [2025-08-22 05:52:41][352485222079151][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:52:41][352485222079151][309 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 05:52:41][352485222079151][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:52:41][352485222079151][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 05:52:41][352485222079151][356 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 05:52:41][352485222079151][356 ms][DEBUG] START check_internet [2025-08-22 05:52:41][352485222079151][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 05:52:41][352485222079151][699 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=208 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 208.418/208.418/208.418/0.000 ms\n [2025-08-22 05:52:41][352485222079151][699 ms][DEBUG] check_internet: online [2025-08-22 05:52:41][352485222079151][699 ms][DEBUG] END check_internet in 344 ms [2025-08-22 05:52:41][352485222079151][699 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:52:41][352485222079151][700 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485222079151\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXA0ZL8AP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1002\"}'\'' -e'"" [2025-08-22 05:52:41][352485222079151][700 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:52:41][352485222079151][700 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352485222079151\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXA0ZL8AP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1002\"}'\'' -e'"" [2025-08-22 05:52:45][352485222079151][4401 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db2b832a-a6b7-457d-b172-db122dbe3721","id":"QR_db2b832a-a6b7-457d-b172-db122dbe3721","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:52:45][352485222079151][4558 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3152 [2025-08-22 05:52:45][352485222079151][4558 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-22 05:52:45][352485222079151][4558 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:52:50][353029495460307][0 ms][INFO] === Request start === [2025-08-22 05:52:50][353029495460307][1 ms][DEBUG] START check_scloud [2025-08-22 05:52:50][353029495460307][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:52:50][353029495460307][240 ms][DEBUG] SU: done in 239 ms; outu0_a118 8453 4994 23917772 136704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:52:50][353029495460307][240 ms][DEBUG] targetPkg: running [2025-08-22 05:52:50][353029495460307][240 ms][DEBUG] END check_scloud in 239 ms [2025-08-22 05:52:50][353029495460307][240 ms][DEBUG] START check_boot_completed [2025-08-22 05:52:50][353029495460307][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:52:50][353029495460307][287 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 05:52:50][353029495460307][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:52:50][353029495460307][350 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 05:52:50][353029495460307][350 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 05:52:50][353029495460307][350 ms][DEBUG] START check_internet [2025-08-22 05:52:50][353029495460307][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 05:52:51][353029495460307][726 ms][DEBUG] SU: done in 377 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.235/261.235/261.235/0.000 ms\n [2025-08-22 05:52:51][353029495460307][727 ms][DEBUG] check_internet: online [2025-08-22 05:52:51][353029495460307][727 ms][DEBUG] END check_internet in 377 ms [2025-08-22 05:52:51][353029495460307][727 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:52:51][353029495460307][727 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495460307\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX410ACAT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9631\"}'\'' -e'"" [2025-08-22 05:52:51][353029495460307][727 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:52:51][353029495460307][727 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029495460307\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX410ACAT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9631\"}'\'' -e'"" [2025-08-22 05:52:55][353029495460307][4645 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_342aad4b-de79-4ae2-a1f3-c89063adb0aa","id":"QR_342aad4b-de79-4ae2-a1f3-c89063adb0aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:52:55][353029495460307][4802 ms][DEBUG] proc_open done in 4075 ms; code=255; res.len=3152 [2025-08-22 05:52:55][353029495460307][4802 ms][DEBUG] END runCmdUntilRes#1 in 4075 ms [2025-08-22 05:52:55][353029495460307][4802 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 05:55:35][352795338243867][1 ms][INFO] === Request start === [2025-08-22 05:55:35][352795338243867][2 ms][DEBUG] START check_scloud [2025-08-22 05:55:35][352795338243867][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 05:55:36][352795338243867][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 8453 4994 23977900 148820 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 05:55:36][352795338243867][317 ms][DEBUG] targetPkg: running [2025-08-22 05:55:36][352795338243867][317 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 05:55:36][352795338243867][317 ms][DEBUG] START check_boot_completed [2025-08-22 05:55:36][352795338243867][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 05:55:36][352795338243867][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 05:55:36][352795338243867][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 05:55:36][352795338243867][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 05:55:36][352795338243867][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 05:55:36][352795338243867][426 ms][DEBUG] rawBody.length=1161 [2025-08-22 05:55:36][352795338243867][426 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795338243867\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T1078EDM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3926\"}'\'' -e'"" [2025-08-22 05:55:36][352795338243867][426 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 05:55:36][352795338243867][426 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795338243867\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T1078EDM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3926\"}'\'' -e'"" [2025-08-22 05:55:40][352795338243867][4706 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a548c534-3e4c-4706-8a87-3af852154f36","id":"QR_a548c534-3e4c-4706-8a87-3af852154f36","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 05:55:40][352795338243867][4862 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3152 [2025-08-22 05:55:40][352795338243867][4862 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-22 05:55:40][352795338243867][4862 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:04:08][359480090593105][1 ms][INFO] === Request start === [2025-08-22 06:04:08][359480090593105][2 ms][DEBUG] START check_scloud [2025-08-22 06:04:08][359480090593105][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:04:09][359480090593105][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 8453 4994 24121220 160240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:04:09][359480090593105][316 ms][DEBUG] targetPkg: running [2025-08-22 06:04:09][359480090593105][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 06:04:09][359480090593105][316 ms][DEBUG] START check_boot_completed [2025-08-22 06:04:09][359480090593105][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:04:09][359480090593105][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 06:04:09][359480090593105][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:04:09][359480090593105][396 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 06:04:09][359480090593105][396 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-22 06:04:09][359480090593105][396 ms][DEBUG] START check_internet [2025-08-22 06:04:09][359480090593105][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 06:04:09][359480090593105][925 ms][DEBUG] SU: done in 529 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.652/201.652/201.652/0.000 ms\n [2025-08-22 06:04:09][359480090593105][925 ms][DEBUG] check_internet: online [2025-08-22 06:04:09][359480090593105][925 ms][DEBUG] END check_internet in 529 ms [2025-08-22 06:04:09][359480090593105][925 ms][DEBUG] rawBody.length=1160 [2025-08-22 06:04:09][359480090593105][925 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359480090593105\",\"model\":\"SM-N960U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8K81BN3DJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2494\"}'\'' -e'"" [2025-08-22 06:04:09][359480090593105][925 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:04:09][359480090593105][925 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359480090593105\",\"model\":\"SM-N960U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8K81BN3DJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2494\"}'\'' -e'"" [2025-08-22 06:04:15][359480090593105][6487 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_48791400-bb32-419a-937a-144e28cde9cc","id":"QR_48791400-bb32-419a-937a-144e28cde9cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:04:15][359480090593105][6643 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3152 [2025-08-22 06:04:15][359480090593105][6643 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-22 06:04:15][359480090593105][6643 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:07:20][352350275781063][1 ms][INFO] === Request start === [2025-08-22 06:07:20][352350275781063][2 ms][DEBUG] START check_scloud [2025-08-22 06:07:20][352350275781063][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:07:20][352350275781063][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 8453 4994 24248372 168004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:07:20][352350275781063][316 ms][DEBUG] targetPkg: running [2025-08-22 06:07:20][352350275781063][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 06:07:20][352350275781063][316 ms][DEBUG] START check_boot_completed [2025-08-22 06:07:20][352350275781063][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:07:20][352350275781063][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 06:07:20][352350275781063][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:07:20][352350275781063][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 06:07:20][352350275781063][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 06:07:20][352350275781063][410 ms][DEBUG] rawBody.length=1161 [2025-08-22 06:07:20][352350275781063][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275781063\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW91K5LZV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6330\"}'\'' -e'"" [2025-08-22 06:07:20][352350275781063][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:07:20][352350275781063][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352350275781063\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW91K5LZV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6330\"}'\'' -e'"" [2025-08-22 06:07:25][352350275781063][4752 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b9b5a59-a244-4a51-b39b-cecf01a8a26b","id":"QR_9b9b5a59-a244-4a51-b39b-cecf01a8a26b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:07:25][352350275781063][4909 ms][DEBUG] proc_open done in 4499 ms; code=255; res.len=3152 [2025-08-22 06:07:25][352350275781063][4909 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-22 06:07:25][352350275781063][4909 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:11:34][352549930140843][1 ms][INFO] === Request start === [2025-08-22 06:11:34][352549930140843][2 ms][DEBUG] START check_scloud [2025-08-22 06:11:34][352549930140843][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:11:34][352549930140843][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 8453 4994 24411416 180252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:11:34][352549930140843][305 ms][DEBUG] targetPkg: running [2025-08-22 06:11:34][352549930140843][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 06:11:34][352549930140843][305 ms][DEBUG] START check_boot_completed [2025-08-22 06:11:34][352549930140843][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:11:34][352549930140843][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 06:11:34][352549930140843][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:11:34][352549930140843][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 06:11:34][352549930140843][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 06:11:34][352549930140843][383 ms][DEBUG] rawBody.length=1161 [2025-08-22 06:11:34][352549930140843][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930140843\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X701KDHB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7770\"}'\'' -e'"" [2025-08-22 06:11:34][352549930140843][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:11:34][352549930140843][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549930140843\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X701KDHB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7770\"}'\'' -e'"" [2025-08-22 06:11:38][352549930140843][4819 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f9539b8-4213-4ca5-8550-94b3e5900942","id":"QR_3f9539b8-4213-4ca5-8550-94b3e5900942","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:11:39][352549930140843][4975 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3152 [2025-08-22 06:11:39][352549930140843][4975 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-22 06:11:39][352549930140843][4976 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:20:33][357576778233906][1 ms][INFO] === Request start === [2025-08-22 06:20:33][357576778233906][2 ms][DEBUG] START check_scloud [2025-08-22 06:20:33][357576778233906][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:20:34][357576778233906][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 8453 4994 24533544 191356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:20:34][357576778233906][309 ms][DEBUG] targetPkg: running [2025-08-22 06:20:34][357576778233906][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 06:20:34][357576778233906][309 ms][DEBUG] START check_boot_completed [2025-08-22 06:20:34][357576778233906][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:20:34][357576778233906][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 06:20:34][357576778233906][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:20:34][357576778233906][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 06:20:34][357576778233906][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 06:20:34][357576778233906][403 ms][DEBUG] START check_internet [2025-08-22 06:20:34][357576778233906][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 06:20:34][357576778233906][918 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.959/202.959/202.959/0.000 ms\n [2025-08-22 06:20:34][357576778233906][918 ms][DEBUG] check_internet: online [2025-08-22 06:20:34][357576778233906][918 ms][DEBUG] END check_internet in 516 ms [2025-08-22 06:20:34][357576778233906][918 ms][DEBUG] rawBody.length=1161 [2025-08-22 06:20:34][357576778233906][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576778233906\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX92YCRXD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9245\"}'\'' -e'"" [2025-08-22 06:20:34][357576778233906][919 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:20:34][357576778233906][919 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576778233906\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX92YCRXD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9245\"}'\'' -e'"" [2025-08-22 06:20:36][357576778233906][3058 ms][DEBUG] proc_open done in 2139 ms (timeout); code=4; out.len=0 err.len=45 [2025-08-22 06:20:36][357576778233906][3058 ms][DEBUG] END runCmdUntilRes#1 in 2140 ms [2025-08-22 06:20:36][357576778233906][3058 ms][ERROR] NO RESULT; code=124 outremote_write PTRACE_POKEDATA head failed: 3 errremote_write PTRACE_POKEDATA head failed: 3\r\n [2025-08-22 06:20:38][357576778233906][0 ms][INFO] === Request start === [2025-08-22 06:20:38][357576778233906][1 ms][DEBUG] START check_scloud [2025-08-22 06:20:38][357576778233906][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:20:38][357576778233906][259 ms][DEBUG] SU: done in 258 ms; out [2025-08-22 06:20:38][357576778233906][259 ms][WARN] targetPkg: not running, restarting [2025-08-22 06:20:38][357576778233906][259 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 06:20:38][357576778233906][384 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 06:20:38][357576778233906][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 06:20:39][357576778233906][540 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 06:20:41][357576778233906][2555 ms][DEBUG] END check_scloud in 2554 ms [2025-08-22 06:20:41][357576778233906][2555 ms][DEBUG] START check_boot_completed [2025-08-22 06:20:41][357576778233906][2555 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:20:41][357576778233906][2602 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 06:20:41][357576778233906][2602 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:20:41][357576778233906][2649 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 06:20:41][357576778233906][2649 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 06:20:41][357576778233906][2649 ms][DEBUG] START check_internet [2025-08-22 06:20:41][357576778233906][2649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 06:20:41][357576778233906][2930 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.327/195.327/195.327/0.000 ms\n [2025-08-22 06:20:41][357576778233906][2930 ms][DEBUG] check_internet: online [2025-08-22 06:20:41][357576778233906][2930 ms][DEBUG] END check_internet in 281 ms [2025-08-22 06:20:41][357576778233906][2930 ms][DEBUG] rawBody.length=1161 [2025-08-22 06:20:41][357576778233906][2930 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576778233906\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX92YCRXD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9245\"}'\'' -e'"" [2025-08-22 06:20:41][357576778233906][2931 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:20:41][357576778233906][2931 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576778233906\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX92YCRXD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"VFJ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9245\"}'\'' -e'"" [2025-08-22 06:20:50][357576778233906][12084 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7552455-5e13-4321-9221-b3c619a1eeb2","id":"QR_d7552455-5e13-4321-9221-b3c619a1eeb2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:20:50][357576778233906][12240 ms][DEBUG] proc_open done in 9309 ms; code=255; res.len=3152 [2025-08-22 06:20:50][357576778233906][12240 ms][DEBUG] END runCmdUntilRes#1 in 9310 ms [2025-08-22 06:20:50][357576778233906][12240 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:21:08][355370104932437][1 ms][INFO] === Request start === [2025-08-22 06:21:08][355370104932437][2 ms][DEBUG] START check_scloud [2025-08-22 06:21:08][355370104932437][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:21:08][355370104932437][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 10155 4994 23750816 125684 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:21:08][355370104932437][304 ms][DEBUG] targetPkg: running [2025-08-22 06:21:08][355370104932437][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 06:21:08][355370104932437][304 ms][DEBUG] START check_boot_completed [2025-08-22 06:21:08][355370104932437][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:21:08][355370104932437][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 06:21:08][355370104932437][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:21:08][355370104932437][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 06:21:08][355370104932437][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 06:21:08][355370104932437][398 ms][DEBUG] rawBody.length=1160 [2025-08-22 06:21:08][355370104932437][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355370104932437\",\"model\":\"SM-X510\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52WB03X4SJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6638\"}'\'' -e'"" [2025-08-22 06:21:08][355370104932437][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:21:08][355370104932437][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355370104932437\",\"model\":\"SM-X510\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52WB03X4SJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6638\"}'\'' -e'"" [2025-08-22 06:21:12][355370104932437][4381 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_af126b0f-bc57-40a1-946b-38f2a1fa34fb","id":"QR_af126b0f-bc57-40a1-946b-38f2a1fa34fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:21:12][355370104932437][4537 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3152 [2025-08-22 06:21:12][355370104932437][4537 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-22 06:21:12][355370104932437][4537 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:38:34][350471121831548][1 ms][INFO] === Request start === [2025-08-22 06:38:34][350471121831548][2 ms][DEBUG] START check_scloud [2025-08-22 06:38:34][350471121831548][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:38:34][350471121831548][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 10155 4994 23781116 137996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:38:34][350471121831548][300 ms][DEBUG] targetPkg: running [2025-08-22 06:38:34][350471121831548][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 06:38:34][350471121831548][300 ms][DEBUG] START check_boot_completed [2025-08-22 06:38:34][350471121831548][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:38:34][350471121831548][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 06:38:34][350471121831548][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:38:34][350471121831548][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 06:38:34][350471121831548][393 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 06:38:34][350471121831548][393 ms][DEBUG] START check_internet [2025-08-22 06:38:34][350471121831548][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 06:38:34][350471121831548][877 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.420/202.420/202.420/0.000 ms\n [2025-08-22 06:38:34][350471121831548][877 ms][DEBUG] check_internet: online [2025-08-22 06:38:34][350471121831548][877 ms][DEBUG] END check_internet in 484 ms [2025-08-22 06:38:34][350471121831548][877 ms][DEBUG] rawBody.length=1161 [2025-08-22 06:38:34][350471121831548][877 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121831548\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX611WMPF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2597\"}'\'' -e'"" [2025-08-22 06:38:34][350471121831548][877 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:38:34][350471121831548][877 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121831548\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX611WMPF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2597\"}'\'' -e'"" [2025-08-22 06:38:39][350471121831548][5110 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42e228ee-0ed0-413a-88d4-eb6c8676279b","id":"QR_42e228ee-0ed0-413a-88d4-eb6c8676279b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:38:39][350471121831548][5267 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3152 [2025-08-22 06:38:39][350471121831548][5267 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-22 06:38:39][350471121831548][5267 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:40:10][350545465382802][0 ms][INFO] === Request start === [2025-08-22 06:40:10][350545465382802][1 ms][DEBUG] START check_scloud [2025-08-22 06:40:10][350545465382802][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:40:11][350545465382802][268 ms][DEBUG] SU: done in 266 ms; outu0_a118 10155 4994 23949356 148800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:40:11][350545465382802][268 ms][DEBUG] targetPkg: running [2025-08-22 06:40:11][350545465382802][268 ms][DEBUG] END check_scloud in 267 ms [2025-08-22 06:40:11][350545465382802][268 ms][DEBUG] START check_boot_completed [2025-08-22 06:40:11][350545465382802][268 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:40:11][350545465382802][314 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 06:40:11][350545465382802][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:40:11][350545465382802][361 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 06:40:11][350545465382802][361 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 06:40:11][350545465382802][361 ms][DEBUG] START check_internet [2025-08-22 06:40:11][350545465382802][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 06:40:11][350545465382802][721 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=241 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 241.602/241.602/241.602/0.000 ms\n [2025-08-22 06:40:11][350545465382802][721 ms][DEBUG] check_internet: online [2025-08-22 06:40:11][350545465382802][721 ms][DEBUG] END check_internet in 359 ms [2025-08-22 06:40:11][350545465382802][721 ms][DEBUG] rawBody.length=1160 [2025-08-22 06:40:11][350545465382802][721 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545465382802\",\"model\":\"SM-X110\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R83X402KQJW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7582\"}'\'' -e'"" [2025-08-22 06:40:11][350545465382802][721 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:40:11][350545465382802][721 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545465382802\",\"model\":\"SM-X110\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R83X402KQJW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7582\"}'\'' -e'"" [2025-08-22 06:40:15][350545465382802][4954 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5376fa56-b122-44f8-8b28-371517cd7f91","id":"QR_5376fa56-b122-44f8-8b28-371517cd7f91","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:40:15][350545465382802][5110 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3152 [2025-08-22 06:40:15][350545465382802][5110 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-22 06:40:15][350545465382802][5110 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:51:06][354485112613679][1 ms][INFO] === Request start === [2025-08-22 06:51:06][354485112613679][2 ms][DEBUG] START check_scloud [2025-08-22 06:51:06][354485112613679][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:51:06][354485112613679][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 10155 4994 24037252 159876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:51:06][354485112613679][304 ms][DEBUG] targetPkg: running [2025-08-22 06:51:06][354485112613679][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 06:51:06][354485112613679][304 ms][DEBUG] START check_boot_completed [2025-08-22 06:51:06][354485112613679][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:51:06][354485112613679][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 06:51:06][354485112613679][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:51:06][354485112613679][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 06:51:06][354485112613679][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 06:51:06][354485112613679][397 ms][DEBUG] rawBody.length=1161 [2025-08-22 06:51:06][354485112613679][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112613679\",\"model\":\"SM-A516N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CN509XPXN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8314\"}'\'' -e'"" [2025-08-22 06:51:06][354485112613679][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:51:06][354485112613679][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354485112613679\",\"model\":\"SM-A516N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CN509XPXN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8314\"}'\'' -e'"" [2025-08-22 06:51:10][354485112613679][4583 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdeab049-0246-4147-a340-f3899d628477","id":"QR_fdeab049-0246-4147-a340-f3899d628477","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:51:11][354485112613679][4740 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3152 [2025-08-22 06:51:11][354485112613679][4740 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-22 06:51:11][354485112613679][4740 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:53:04][353722581601376][0 ms][INFO] === Request start === [2025-08-22 06:53:04][353722581601376][0 ms][DEBUG] START check_scloud [2025-08-22 06:53:04][353722581601376][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:53:04][353722581601376][293 ms][DEBUG] SU: done in 293 ms; outu0_a118 10155 4994 24176628 171940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:53:04][353722581601376][293 ms][DEBUG] targetPkg: running [2025-08-22 06:53:04][353722581601376][293 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 06:53:04][353722581601376][293 ms][DEBUG] START check_boot_completed [2025-08-22 06:53:04][353722581601376][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:53:04][353722581601376][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 06:53:04][353722581601376][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:53:04][353722581601376][402 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 06:53:04][353722581601376][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 06:53:04][353722581601376][403 ms][DEBUG] rawBody.length=1161 [2025-08-22 06:53:04][353722581601376][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722581601376\",\"model\":\"SM-A336E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTC086T8K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1566\"}'\'' -e'"" [2025-08-22 06:53:04][353722581601376][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:53:04][353722581601376][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353722581601376\",\"model\":\"SM-A336E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTC086T8K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1566\"}'\'' -e'"" [2025-08-22 06:53:09][353722581601376][4604 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09df0d05-5e30-48cb-b2b3-d29d32b014f8","id":"QR_09df0d05-5e30-48cb-b2b3-d29d32b014f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:53:09][353722581601376][4761 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3152 [2025-08-22 06:53:09][353722581601376][4761 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-22 06:53:09][353722581601376][4761 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 06:58:17][357576776099846][1 ms][INFO] === Request start === [2025-08-22 06:58:17][357576776099846][2 ms][DEBUG] START check_scloud [2025-08-22 06:58:17][357576776099846][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 06:58:17][357576776099846][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 10155 4994 24331352 183068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 06:58:17][357576776099846][299 ms][DEBUG] targetPkg: running [2025-08-22 06:58:17][357576776099846][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 06:58:17][357576776099846][299 ms][DEBUG] START check_boot_completed [2025-08-22 06:58:17][357576776099846][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 06:58:17][357576776099846][345 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 06:58:17][357576776099846][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 06:58:17][357576776099846][393 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 06:58:17][357576776099846][393 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 06:58:17][357576776099846][393 ms][DEBUG] START check_internet [2025-08-22 06:58:17][357576776099846][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 06:58:18][357576776099846][955 ms][DEBUG] SU: done in 561 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.888/201.888/201.888/0.000 ms\n [2025-08-22 06:58:18][357576776099846][955 ms][DEBUG] check_internet: online [2025-08-22 06:58:18][357576776099846][955 ms][DEBUG] END check_internet in 561 ms [2025-08-22 06:58:18][357576776099846][955 ms][DEBUG] rawBody.length=1161 [2025-08-22 06:58:18][357576776099846][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576776099846\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX81708GY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8581\"}'\'' -e'"" [2025-08-22 06:58:18][357576776099846][955 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 06:58:18][357576776099846][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576776099846\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX81708GY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8581\"}'\'' -e'"" [2025-08-22 06:58:22][357576776099846][5188 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0485eeee-4688-48fe-8338-c297e2521b54","id":"QR_0485eeee-4688-48fe-8338-c297e2521b54","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 06:58:22][357576776099846][5344 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3152 [2025-08-22 06:58:22][357576776099846][5344 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-22 06:58:22][357576776099846][5344 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:02:13][357042148382667][1 ms][INFO] === Request start === [2025-08-22 07:02:13][357042148382667][2 ms][DEBUG] START check_scloud [2025-08-22 07:02:13][357042148382667][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:02:13][357042148382667][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 10155 4994 24486204 195268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:02:13][357042148382667][315 ms][DEBUG] targetPkg: running [2025-08-22 07:02:13][357042148382667][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 07:02:13][357042148382667][315 ms][DEBUG] START check_boot_completed [2025-08-22 07:02:13][357042148382667][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:02:13][357042148382667][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:02:13][357042148382667][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:02:13][357042148382667][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:02:13][357042148382667][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 07:02:13][357042148382667][408 ms][DEBUG] START check_internet [2025-08-22 07:02:13][357042148382667][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:02:14][357042148382667][924 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.747/201.747/201.747/0.000 ms\n [2025-08-22 07:02:14][357042148382667][924 ms][DEBUG] check_internet: online [2025-08-22 07:02:14][357042148382667][924 ms][DEBUG] END check_internet in 516 ms [2025-08-22 07:02:14][357042148382667][924 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:02:14][357042148382667][924 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042148382667\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX81KNS4M\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2895\"}'\'' -e'"" [2025-08-22 07:02:14][357042148382667][924 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:02:14][357042148382667][924 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357042148382667\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX81KNS4M\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2895\"}'\'' -e'"" [2025-08-22 07:02:18][357042148382667][5110 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d0e2c23f-5faf-4b1a-8ba1-78c5122e7fd2","id":"QR_d0e2c23f-5faf-4b1a-8ba1-78c5122e7fd2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:02:18][357042148382667][5267 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3152 [2025-08-22 07:02:18][357042148382667][5267 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-22 07:02:18][357042148382667][5267 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:04:08][350545466618907][1 ms][INFO] === Request start === [2025-08-22 07:04:08][350545466618907][2 ms][DEBUG] START check_scloud [2025-08-22 07:04:08][350545466618907][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:04:08][350545466618907][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 10155 4994 24606048 206424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:04:08][350545466618907][309 ms][DEBUG] targetPkg: running [2025-08-22 07:04:08][350545466618907][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 07:04:08][350545466618907][309 ms][DEBUG] START check_boot_completed [2025-08-22 07:04:08][350545466618907][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:04:08][350545466618907][353 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 07:04:08][350545466618907][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:04:08][350545466618907][402 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 07:04:08][350545466618907][402 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 07:04:08][350545466618907][402 ms][DEBUG] START check_internet [2025-08-22 07:04:08][350545466618907][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:04:09][350545466618907][900 ms][DEBUG] SU: done in 498 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.230/199.230/199.230/0.000 ms\n [2025-08-22 07:04:09][350545466618907][900 ms][DEBUG] check_internet: online [2025-08-22 07:04:09][350545466618907][901 ms][DEBUG] END check_internet in 498 ms [2025-08-22 07:04:09][350545466618907][901 ms][DEBUG] rawBody.length=1160 [2025-08-22 07:04:09][350545466618907][901 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545466618907\",\"model\":\"SM-T500\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TR2055HDJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4054\"}'\'' -e'"" [2025-08-22 07:04:09][350545466618907][901 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:04:09][350545466618907][901 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545466618907\",\"model\":\"SM-T500\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TR2055HDJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4054\"}'\'' -e'"" [2025-08-22 07:04:13][350545466618907][5258 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_20e5618f-b869-4a73-879c-8ddfa56ea94d","id":"QR_20e5618f-b869-4a73-879c-8ddfa56ea94d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:04:13][350545466618907][5415 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3152 [2025-08-22 07:04:13][350545466618907][5415 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-22 07:04:13][350545466618907][5415 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:09:09][350121673217915][1 ms][INFO] === Request start === [2025-08-22 07:09:09][350121673217915][2 ms][DEBUG] START check_scloud [2025-08-22 07:09:09][350121673217915][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:09:09][350121673217915][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 10155 4994 24741828 217608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:09:09][350121673217915][309 ms][DEBUG] targetPkg: running [2025-08-22 07:09:09][350121673217915][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 07:09:09][350121673217915][309 ms][DEBUG] START check_boot_completed [2025-08-22 07:09:09][350121673217915][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:09:09][350121673217915][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:09:09][350121673217915][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:09:09][350121673217915][434 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 07:09:09][350121673217915][434 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 07:09:09][350121673217915][434 ms][DEBUG] rawBody.length=1160 [2025-08-22 07:09:09][350121673217915][434 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121673217915\",\"model\":\"SM-G998U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CRB1A4R6X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5180\"}'\'' -e'"" [2025-08-22 07:09:09][350121673217915][434 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:09:09][350121673217915][434 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350121673217915\",\"model\":\"SM-G998U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CRB1A4R6X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5180\"}'\'' -e'"" [2025-08-22 07:09:14][350121673217915][5620 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0bcbd709-4609-4107-88dc-2d75728762bf","id":"QR_0bcbd709-4609-4107-88dc-2d75728762bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:09:14][350121673217915][5776 ms][DEBUG] proc_open done in 5342 ms; code=255; res.len=3152 [2025-08-22 07:09:14][350121673217915][5776 ms][DEBUG] END runCmdUntilRes#1 in 5342 ms [2025-08-22 07:09:14][350121673217915][5776 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:09:22][352374393093433][0 ms][INFO] === Request start === [2025-08-22 07:09:22][352374393093433][1 ms][DEBUG] START check_scloud [2025-08-22 07:09:22][352374393093433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:09:23][352374393093433][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 10155 4994 24878284 229472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:09:23][352374393093433][260 ms][DEBUG] targetPkg: running [2025-08-22 07:09:23][352374393093433][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-22 07:09:23][352374393093433][260 ms][DEBUG] START check_boot_completed [2025-08-22 07:09:23][352374393093433][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:09:23][352374393093433][291 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:09:23][352374393093433][291 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:09:23][352374393093433][338 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:09:23][352374393093433][338 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:09:23][352374393093433][338 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:09:23][352374393093433][338 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352374393093433\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R6CX300RYSZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4208\"}'\'' -e'"" [2025-08-22 07:09:23][352374393093433][338 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:09:23][352374393093433][338 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352374393093433\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R6CX300RYSZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4208\"}'\'' -e'"" [2025-08-22 07:09:27][352374393093433][4712 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a0cdd221-7568-4ddb-8564-16d159ff15a6","id":"QR_a0cdd221-7568-4ddb-8564-16d159ff15a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:09:27][352374393093433][4868 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3152 [2025-08-22 07:09:27][352374393093433][4868 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-22 07:09:27][352374393093433][4868 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:10:15][352674520092475][1 ms][INFO] === Request start === [2025-08-22 07:10:15][352674520092475][2 ms][DEBUG] START check_scloud [2025-08-22 07:10:15][352674520092475][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:10:16][352674520092475][279 ms][DEBUG] SU: done in 277 ms; outu0_a118 10155 4994 24971660 240384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:10:16][352674520092475][279 ms][DEBUG] targetPkg: running [2025-08-22 07:10:16][352674520092475][279 ms][DEBUG] END check_scloud in 277 ms [2025-08-22 07:10:16][352674520092475][279 ms][DEBUG] START check_boot_completed [2025-08-22 07:10:16][352674520092475][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:10:16][352674520092475][310 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:10:16][352674520092475][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:10:16][352674520092475][373 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 07:10:16][352674520092475][373 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 07:10:16][352674520092475][373 ms][DEBUG] START check_internet [2025-08-22 07:10:16][352674520092475][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:10:16][352674520092475][888 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.459/201.459/201.459/0.000 ms\n [2025-08-22 07:10:16][352674520092475][888 ms][DEBUG] check_internet: online [2025-08-22 07:10:16][352674520092475][888 ms][DEBUG] END check_internet in 515 ms [2025-08-22 07:10:16][352674520092475][888 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:10:16][352674520092475][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520092475\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W6093XEW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2345\"}'\'' -e'"" [2025-08-22 07:10:16][352674520092475][889 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:10:16][352674520092475][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520092475\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W6093XEW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2345\"}'\'' -e'"" [2025-08-22 07:10:20][352674520092475][4825 ms][DEBUG] proc_open done in 3936 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 07:10:20][352674520092475][4825 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-22 07:10:20][352674520092475][4825 ms][WARN] Detected error: Process with pid 10155 either refused to load frida-agent, or terminated during injection [2025-08-22 07:10:20][352674520092475][4825 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 07:10:20][352674520092475][4951 ms][DEBUG] SU: done in 126 ms; out [2025-08-22 07:10:20][352674520092475][4951 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 07:10:20][352674520092475][4951 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 07:10:20][352674520092475][5090 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 07:10:20][352674520092475][5091 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 07:10:21][352674520092475][5262 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 07:10:23][352674520092475][7277 ms][DEBUG] START check_boot_completed [2025-08-22 07:10:23][352674520092475][7277 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:10:23][352674520092475][7324 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:10:23][352674520092475][7324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:10:23][352674520092475][7371 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:10:23][352674520092475][7371 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 07:10:26][352674520092475][10386 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 07:10:26][352674520092475][10386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520092475\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W6093XEW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2345\"}'\'' -e'"" [2025-08-22 07:10:30][352674520092475][14385 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f7ca4b5-fce9-44de-9696-6a68f620721f","id":"QR_6f7ca4b5-fce9-44de-9696-6a68f620721f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:10:30][352674520092475][14541 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3152 [2025-08-22 07:10:30][352674520092475][14541 ms][DEBUG] END runCmdUntilRes#2 in 4155 ms [2025-08-22 07:10:30][352674520092475][14541 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:13:07][355045117865945][1 ms][INFO] === Request start === [2025-08-22 07:13:07][355045117865945][2 ms][DEBUG] START check_scloud [2025-08-22 07:13:07][355045117865945][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:13:07][355045117865945][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 12773 4994 23670688 126540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:13:07][355045117865945][309 ms][DEBUG] targetPkg: running [2025-08-22 07:13:07][355045117865945][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 07:13:07][355045117865945][309 ms][DEBUG] START check_boot_completed [2025-08-22 07:13:07][355045117865945][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:13:07][355045117865945][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:13:07][355045117865945][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:13:07][355045117865945][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:13:07][355045117865945][387 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:13:07][355045117865945][387 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:13:07][355045117865945][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045117865945\",\"model\":\"SM-N770F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N63ZRZHH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KSA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1593\"}'\'' -e'"" [2025-08-22 07:13:07][355045117865945][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:13:07][355045117865945][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355045117865945\",\"model\":\"SM-N770F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N63ZRZHH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KSA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1593\"}'\'' -e'"" [2025-08-22 07:13:11][355045117865945][4417 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_344ee782-dfcd-43ca-bf6a-38d9719f35da","id":"QR_344ee782-dfcd-43ca-bf6a-38d9719f35da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:13:11][355045117865945][4573 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3152 [2025-08-22 07:13:11][355045117865945][4573 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-22 07:13:11][355045117865945][4573 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:14:06][354747955694078][1 ms][INFO] === Request start === [2025-08-22 07:14:06][354747955694078][2 ms][DEBUG] START check_scloud [2025-08-22 07:14:06][354747955694078][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:14:06][354747955694078][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 12773 4994 23785412 137768 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:14:06][354747955694078][302 ms][DEBUG] targetPkg: running [2025-08-22 07:14:06][354747955694078][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 07:14:06][354747955694078][302 ms][DEBUG] START check_boot_completed [2025-08-22 07:14:06][354747955694078][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:14:06][354747955694078][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:14:06][354747955694078][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:14:06][354747955694078][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 07:14:06][354747955694078][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 07:14:06][354747955694078][411 ms][DEBUG] START check_internet [2025-08-22 07:14:06][354747955694078][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:14:07][354747955694078][895 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.741/197.741/197.741/0.000 ms\n [2025-08-22 07:14:07][354747955694078][895 ms][DEBUG] check_internet: online [2025-08-22 07:14:07][354747955694078][895 ms][DEBUG] END check_internet in 484 ms [2025-08-22 07:14:07][354747955694078][895 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:14:07][354747955694078][895 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955694078\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60GWLBJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5762\"}'\'' -e'"" [2025-08-22 07:14:07][354747955694078][895 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:14:07][354747955694078][895 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747955694078\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60GWLBJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5762\"}'\'' -e'"" [2025-08-22 07:14:11][354747955694078][4738 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d70354c1-1334-41d6-95ba-90b747508ec7","id":"QR_d70354c1-1334-41d6-95ba-90b747508ec7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:14:11][354747955694078][4894 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3152 [2025-08-22 07:14:11][354747955694078][4894 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-22 07:14:11][354747955694078][4894 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:16:06][351003240502657][0 ms][INFO] === Request start === [2025-08-22 07:16:06][351003240502657][1 ms][DEBUG] START check_scloud [2025-08-22 07:16:06][351003240502657][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:16:06][351003240502657][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 12773 4994 23919656 149500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:16:06][351003240502657][312 ms][DEBUG] targetPkg: running [2025-08-22 07:16:06][351003240502657][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 07:16:06][351003240502657][312 ms][DEBUG] START check_boot_completed [2025-08-22 07:16:06][351003240502657][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:16:06][351003240502657][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:16:06][351003240502657][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:16:06][351003240502657][408 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 07:16:06][351003240502657][408 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-22 07:16:06][351003240502657][408 ms][DEBUG] START check_internet [2025-08-22 07:16:06][351003240502657][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:16:07][351003240502657][828 ms][DEBUG] SU: done in 420 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=294 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 294.361/294.361/294.361/0.000 ms\n [2025-08-22 07:16:07][351003240502657][828 ms][DEBUG] check_internet: online [2025-08-22 07:16:07][351003240502657][828 ms][DEBUG] END check_internet in 420 ms [2025-08-22 07:16:07][351003240502657][828 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:16:07][351003240502657][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351003240502657\",\"model\":\"SM-F711N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CR80A1VDR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6837\"}'\'' -e'"" [2025-08-22 07:16:07][351003240502657][828 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:16:07][351003240502657][828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351003240502657\",\"model\":\"SM-F711N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CR80A1VDR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6837\"}'\'' -e'"" [2025-08-22 07:16:11][351003240502657][5248 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d057d34e-39db-4ba8-95a5-695721bf9bc5","id":"QR_d057d34e-39db-4ba8-95a5-695721bf9bc5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:16:11][351003240502657][5405 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3152 [2025-08-22 07:16:11][351003240502657][5405 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-22 07:16:11][351003240502657][5405 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:21:06][355731096411674][1 ms][INFO] === Request start === [2025-08-22 07:21:06][355731096411674][2 ms][DEBUG] START check_scloud [2025-08-22 07:21:06][355731096411674][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:21:06][355731096411674][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 12773 4994 24085772 160944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:21:06][355731096411674][303 ms][DEBUG] targetPkg: running [2025-08-22 07:21:06][355731096411674][303 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 07:21:06][355731096411674][303 ms][DEBUG] START check_boot_completed [2025-08-22 07:21:06][355731096411674][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:21:06][355731096411674][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:21:06][355731096411674][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:21:06][355731096411674][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:21:06][355731096411674][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 07:21:06][355731096411674][396 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:21:06][355731096411674][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731096411674\",\"model\":\"SM-N950F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58K838PKEJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1278\"}'\'' -e'"" [2025-08-22 07:21:06][355731096411674][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:21:06][355731096411674][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355731096411674\",\"model\":\"SM-N950F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58K838PKEJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"THL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1278\"}'\'' -e'"" [2025-08-22 07:21:11][355731096411674][4895 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb607e59-c3f9-41b4-84ad-16e8c2a08d2d","id":"QR_cb607e59-c3f9-41b4-84ad-16e8c2a08d2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:21:11][355731096411674][5051 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3152 [2025-08-22 07:21:11][355731096411674][5051 ms][DEBUG] END runCmdUntilRes#1 in 4655 ms [2025-08-22 07:21:11][355731096411674][5051 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:22:20][350522950518547][1 ms][INFO] === Request start === [2025-08-22 07:22:20][350522950518547][2 ms][DEBUG] START check_scloud [2025-08-22 07:22:20][350522950518547][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:22:21][350522950518547][278 ms][DEBUG] SU: done in 277 ms; outu0_a118 12773 4994 24240436 171868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:22:21][350522950518547][278 ms][DEBUG] targetPkg: running [2025-08-22 07:22:21][350522950518547][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-22 07:22:21][350522950518547][279 ms][DEBUG] START check_boot_completed [2025-08-22 07:22:21][350522950518547][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:22:21][350522950518547][324 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 07:22:21][350522950518547][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:22:21][350522950518547][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:22:21][350522950518547][371 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 07:22:21][350522950518547][371 ms][DEBUG] START check_internet [2025-08-22 07:22:21][350522950518547][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:22:21][350522950518547][808 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.650/200.650/200.650/0.000 ms\n [2025-08-22 07:22:21][350522950518547][808 ms][DEBUG] check_internet: online [2025-08-22 07:22:21][350522950518547][809 ms][DEBUG] END check_internet in 438 ms [2025-08-22 07:22:21][350522950518547][809 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:22:21][350522950518547][809 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350522950518547\",\"model\":\"SM-S937B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY5324WDB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4766\"}'\'' -e'"" [2025-08-22 07:22:21][350522950518547][809 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:22:21][350522950518547][809 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350522950518547\",\"model\":\"SM-S937B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY5324WDB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4766\"}'\'' -e'"" [2025-08-22 07:22:25][350522950518547][5042 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_33beb7e3-e691-45f6-b425-4a6416556f2e","id":"QR_33beb7e3-e691-45f6-b425-4a6416556f2e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:22:26][350522950518547][5198 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3152 [2025-08-22 07:22:26][350522950518547][5198 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-22 07:22:26][350522950518547][5198 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:22:32][352009449785513][1 ms][INFO] === Request start === [2025-08-22 07:22:32][352009449785513][2 ms][DEBUG] START check_scloud [2025-08-22 07:22:32][352009449785513][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:22:32][352009449785513][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 12773 4994 24407612 183724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:22:32][352009449785513][301 ms][DEBUG] targetPkg: running [2025-08-22 07:22:32][352009449785513][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 07:22:32][352009449785513][302 ms][DEBUG] START check_boot_completed [2025-08-22 07:22:32][352009449785513][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:22:32][352009449785513][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:22:32][352009449785513][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:22:32][352009449785513][397 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 07:22:32][352009449785513][397 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 07:22:32][352009449785513][397 ms][DEBUG] START check_internet [2025-08-22 07:22:32][352009449785513][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:22:33][352009449785513][770 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=226 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 226.865/226.865/226.865/0.000 ms\n [2025-08-22 07:22:33][352009449785513][770 ms][DEBUG] check_internet: online [2025-08-22 07:22:33][352009449785513][770 ms][DEBUG] END check_internet in 373 ms [2025-08-22 07:22:33][352009449785513][770 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:22:33][352009449785513][770 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009449785513\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWB05VEXZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6178\"}'\'' -e'"" [2025-08-22 07:22:33][352009449785513][770 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:22:33][352009449785513][770 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009449785513\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWB05VEXZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6178\"}'\'' -e'"" [2025-08-22 07:22:37][352009449785513][4612 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_820ada12-a618-4d03-86e6-5275dcee346f","id":"QR_820ada12-a618-4d03-86e6-5275dcee346f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:22:37][352009449785513][4769 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3152 [2025-08-22 07:22:37][352009449785513][4769 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-22 07:22:37][352009449785513][4769 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:25:08][357644126422215][0 ms][INFO] === Request start === [2025-08-22 07:25:08][357644126422215][0 ms][DEBUG] START check_scloud [2025-08-22 07:25:08][357644126422215][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:25:08][357644126422215][306 ms][DEBUG] SU: done in 306 ms; outu0_a118 12773 4994 24506036 194912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:25:08][357644126422215][306 ms][DEBUG] targetPkg: running [2025-08-22 07:25:08][357644126422215][306 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 07:25:08][357644126422215][306 ms][DEBUG] START check_boot_completed [2025-08-22 07:25:08][357644126422215][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:25:08][357644126422215][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:25:08][357644126422215][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:25:08][357644126422215][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:25:08][357644126422215][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:25:08][357644126422215][384 ms][DEBUG] rawBody.length=1160 [2025-08-22 07:25:08][357644126422215][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357644126422215\",\"model\":\"SM-P610\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R54R902S5DN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4439\"}'\'' -e'"" [2025-08-22 07:25:08][357644126422215][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:25:08][357644126422215][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357644126422215\",\"model\":\"SM-P610\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R54R902S5DN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4439\"}'\'' -e'"" [2025-08-22 07:25:12][357644126422215][4321 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 07:25:12][357644126422215][4477 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=115 [2025-08-22 07:25:12][357644126422215][4477 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-22 07:25:12][357644126422215][4477 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 07:25:15][358024391766779][0 ms][INFO] === Request start === [2025-08-22 07:25:15][358024391766779][1 ms][DEBUG] START check_scloud [2025-08-22 07:25:15][358024391766779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:25:15][358024391766779][294 ms][DEBUG] SU: done in 292 ms; outu0_a118 12773 4994 24654652 206680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:25:15][358024391766779][294 ms][DEBUG] targetPkg: running [2025-08-22 07:25:15][358024391766779][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 07:25:15][358024391766779][294 ms][DEBUG] START check_boot_completed [2025-08-22 07:25:15][358024391766779][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:25:15][358024391766779][324 ms][DEBUG] ADB: done in 30 ms; out [2025-08-22 07:25:15][358024391766779][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:25:15][358024391766779][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:25:15][358024391766779][371 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-22 07:25:15][358024391766779][371 ms][DEBUG] rawBody.length=1159 [2025-08-22 07:25:15][358024391766779][371 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358024391766779\",\"model\":\"SM-P610\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R54R902S5DN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6480\"}'\'' -e'"" [2025-08-22 07:25:15][358024391766779][371 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:25:15][358024391766779][371 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358024391766779\",\"model\":\"SM-P610\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R54R902S5DN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6480\"}'\'' -e'"" [2025-08-22 07:25:21][358024391766779][5682 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c8fca5f-b4be-4e8b-85a6-e944ae6acaf2","id":"QR_9c8fca5f-b4be-4e8b-85a6-e944ae6acaf2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:25:21][358024391766779][5838 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3152 [2025-08-22 07:25:21][358024391766779][5838 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-22 07:25:21][358024391766779][5838 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:27:18][354460117083475][1 ms][INFO] === Request start === [2025-08-22 07:27:18][354460117083475][2 ms][DEBUG] START check_scloud [2025-08-22 07:27:18][354460117083475][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:27:19][354460117083475][259 ms][DEBUG] SU: done in 257 ms; outu0_a118 12773 4994 24770556 217568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:27:19][354460117083475][259 ms][DEBUG] targetPkg: running [2025-08-22 07:27:19][354460117083475][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-22 07:27:19][354460117083475][259 ms][DEBUG] START check_boot_completed [2025-08-22 07:27:19][354460117083475][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:27:19][354460117083475][306 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:27:19][354460117083475][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:27:19][354460117083475][368 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 07:27:19][354460117083475][368 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 07:27:19][354460117083475][368 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:27:19][354460117083475][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354460117083475\",\"model\":\"SM-G980F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N31A5BWJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ILO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8498\"}'\'' -e'"" [2025-08-22 07:27:19][354460117083475][368 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:27:19][354460117083475][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354460117083475\",\"model\":\"SM-G980F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N31A5BWJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ILO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8498\"}'\'' -e'"" [2025-08-22 07:27:23][354460117083475][4789 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e93a3ac4-857a-4411-85aa-2d020e3a1d5d","id":"QR_e93a3ac4-857a-4411-85aa-2d020e3a1d5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:27:23][354460117083475][4945 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3152 [2025-08-22 07:27:23][354460117083475][4945 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-22 07:27:23][354460117083475][4945 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:27:31][351250092451273][0 ms][INFO] === Request start === [2025-08-22 07:27:31][351250092451273][1 ms][DEBUG] START check_scloud [2025-08-22 07:27:31][351250092451273][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:27:32][351250092451273][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 12773 4994 24911108 229468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:27:32][351250092451273][299 ms][DEBUG] targetPkg: running [2025-08-22 07:27:32][351250092451273][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 07:27:32][351250092451273][299 ms][DEBUG] START check_boot_completed [2025-08-22 07:27:32][351250092451273][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:27:32][351250092451273][346 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:27:32][351250092451273][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:27:32][351250092451273][395 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 07:27:32][351250092451273][395 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 07:27:32][351250092451273][395 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:27:32][351250092451273][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250092451273\",\"model\":\"SM-A156E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX61HGT0W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5869\"}'\'' -e'"" [2025-08-22 07:27:32][351250092451273][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:27:32][351250092451273][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250092451273\",\"model\":\"SM-A156E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX61HGT0W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5869\"}'\'' -e'"" [2025-08-22 07:27:36][351250092451273][4236 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_965a8ddd-3c7f-4b15-a953-0cdd4ce9c4fd","id":"QR_965a8ddd-3c7f-4b15-a953-0cdd4ce9c4fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:27:36][351250092451273][4392 ms][DEBUG] proc_open done in 3997 ms; code=255; res.len=3152 [2025-08-22 07:27:36][351250092451273][4392 ms][DEBUG] END runCmdUntilRes#1 in 3997 ms [2025-08-22 07:27:36][351250092451273][4392 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:30:08][351307280217252][1 ms][INFO] === Request start === [2025-08-22 07:30:08][351307280217252][2 ms][DEBUG] START check_scloud [2025-08-22 07:30:08][351307280217252][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:30:08][351307280217252][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 12773 4994 25057796 240696 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:30:08][351307280217252][305 ms][DEBUG] targetPkg: running [2025-08-22 07:30:08][351307280217252][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 07:30:08][351307280217252][305 ms][DEBUG] START check_boot_completed [2025-08-22 07:30:08][351307280217252][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:30:08][351307280217252][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:30:08][351307280217252][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:30:09][351307280217252][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:30:09][351307280217252][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:30:09][351307280217252][383 ms][DEBUG] START check_internet [2025-08-22 07:30:09][351307280217252][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:30:09][351307280217252][899 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.786/201.786/201.786/0.000 ms\n [2025-08-22 07:30:09][351307280217252][899 ms][DEBUG] check_internet: online [2025-08-22 07:30:09][351307280217252][899 ms][DEBUG] END check_internet in 515 ms [2025-08-22 07:30:09][351307280217252][899 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:30:09][351307280217252][899 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351307280217252\",\"model\":\"SM-A715F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R10FVCHZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"NEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6651\"}'\'' -e'"" [2025-08-22 07:30:09][351307280217252][899 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:30:09][351307280217252][899 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351307280217252\",\"model\":\"SM-A715F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R10FVCHZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"NEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6651\"}'\'' -e'"" [2025-08-22 07:30:13][351307280217252][4476 ms][DEBUG] proc_open done in 3577 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 07:30:13][351307280217252][4476 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-22 07:30:13][351307280217252][4476 ms][WARN] Detected error: Process with pid 12773 either refused to load frida-agent, or terminated during injection [2025-08-22 07:30:13][351307280217252][4476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 07:30:13][351307280217252][4633 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 07:30:13][351307280217252][4633 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 07:30:13][351307280217252][4633 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 07:30:13][351307280217252][4773 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 07:30:13][351307280217252][4773 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 07:30:13][351307280217252][4946 ms][DEBUG] SU: done in 173 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 07:30:15][351307280217252][6960 ms][DEBUG] START check_boot_completed [2025-08-22 07:30:15][351307280217252][6960 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:30:15][351307280217252][7007 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:30:15][351307280217252][7007 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:30:15][351307280217252][7069 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 07:30:15][351307280217252][7070 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 07:30:18][351307280217252][10084 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 07:30:18][351307280217252][10084 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351307280217252\",\"model\":\"SM-A715F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R10FVCHZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"NEE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6651\"}'\'' -e'"" [2025-08-22 07:30:23][351307280217252][14552 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3cd60b1-6ab4-4e3a-8a28-7a5f7e6f9aeb","id":"QR_a3cd60b1-6ab4-4e3a-8a28-7a5f7e6f9aeb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:30:23][351307280217252][14708 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3152 [2025-08-22 07:30:23][351307280217252][14708 ms][DEBUG] END runCmdUntilRes#2 in 4624 ms [2025-08-22 07:30:23][351307280217252][14708 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:30:33][352879321111677][0 ms][INFO] === Request start === [2025-08-22 07:30:33][352879321111677][1 ms][DEBUG] START check_scloud [2025-08-22 07:30:33][352879321111677][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:30:33][352879321111677][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 14334 4994 23795012 125440 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:30:33][352879321111677][260 ms][DEBUG] targetPkg: running [2025-08-22 07:30:33][352879321111677][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-22 07:30:33][352879321111677][260 ms][DEBUG] START check_boot_completed [2025-08-22 07:30:33][352879321111677][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:30:34][352879321111677][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:30:34][352879321111677][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:30:34][352879321111677][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:30:34][352879321111677][354 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 07:30:34][352879321111677][354 ms][DEBUG] START check_internet [2025-08-22 07:30:34][352879321111677][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:30:34][352879321111677][713 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.127/240.127/240.127/0.000 ms\n [2025-08-22 07:30:34][352879321111677][713 ms][DEBUG] check_internet: online [2025-08-22 07:30:34][352879321111677][713 ms][DEBUG] END check_internet in 359 ms [2025-08-22 07:30:34][352879321111677][713 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:30:34][352879321111677][714 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879321111677\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW815SE0Z\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MDA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1239\"}'\'' -e'"" [2025-08-22 07:30:34][352879321111677][714 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:30:34][352879321111677][714 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879321111677\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW815SE0Z\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MDA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1239\"}'\'' -e'"" [2025-08-22 07:30:38][352879321111677][4821 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_04513571-d580-4313-8360-dbe1429d045b","id":"QR_04513571-d580-4313-8360-dbe1429d045b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:30:38][352879321111677][4978 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3152 [2025-08-22 07:30:38][352879321111677][4978 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-22 07:30:38][352879321111677][4978 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:30:41][354963321762206][0 ms][INFO] === Request start === [2025-08-22 07:30:41][354963321762206][1 ms][DEBUG] START check_scloud [2025-08-22 07:30:41][354963321762206][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:30:41][354963321762206][258 ms][DEBUG] SU: done in 257 ms; outu0_a118 14334 4994 23942376 136328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:30:41][354963321762206][258 ms][DEBUG] targetPkg: running [2025-08-22 07:30:41][354963321762206][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-22 07:30:41][354963321762206][258 ms][DEBUG] START check_boot_completed [2025-08-22 07:30:41][354963321762206][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:30:41][354963321762206][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:30:41][354963321762206][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:30:41][354963321762206][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:30:41][354963321762206][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:30:41][354963321762206][336 ms][DEBUG] START check_internet [2025-08-22 07:30:41][354963321762206][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:30:42][354963321762206][586 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.722/145.722/145.722/0.000 ms\n [2025-08-22 07:30:42][354963321762206][586 ms][DEBUG] check_internet: online [2025-08-22 07:30:42][354963321762206][586 ms][DEBUG] END check_internet in 250 ms [2025-08-22 07:30:42][354963321762206][587 ms][DEBUG] rawBody.length=1160 [2025-08-22 07:30:42][354963321762206][587 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354963321762206\",\"model\":\"SM-P613\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52TC00RLDW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2783\"}'\'' -e'"" [2025-08-22 07:30:42][354963321762206][587 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:30:42][354963321762206][587 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354963321762206\",\"model\":\"SM-P613\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52TC00RLDW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSG\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2783\"}'\'' -e'"" [2025-08-22 07:30:46][354963321762206][4601 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aa3b0d50-cb17-422b-9980-0c893983dbc8","id":"QR_aa3b0d50-cb17-422b-9980-0c893983dbc8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:30:46][354963321762206][4757 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3152 [2025-08-22 07:30:46][354963321762206][4757 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-22 07:30:46][354963321762206][4757 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:32:36][355506802009701][0 ms][INFO] === Request start === [2025-08-22 07:32:36][355506802009701][0 ms][DEBUG] START check_scloud [2025-08-22 07:32:36][355506802009701][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:32:36][355506802009701][302 ms][DEBUG] SU: done in 302 ms; outu0_a118 14334 4994 23948332 148952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:32:36][355506802009701][302 ms][DEBUG] targetPkg: running [2025-08-22 07:32:36][355506802009701][302 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 07:32:36][355506802009701][302 ms][DEBUG] START check_boot_completed [2025-08-22 07:32:36][355506802009701][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:32:36][355506802009701][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:32:36][355506802009701][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:32:36][355506802009701][397 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 07:32:36][355506802009701][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 07:32:36][355506802009701][397 ms][DEBUG] START check_internet [2025-08-22 07:32:36][355506802009701][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:32:36][355506802009701][677 ms][DEBUG] SU: done in 280 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.763/164.763/164.763/0.000 ms\n [2025-08-22 07:32:36][355506802009701][677 ms][DEBUG] check_internet: online [2025-08-22 07:32:36][355506802009701][677 ms][DEBUG] END check_internet in 280 ms [2025-08-22 07:32:36][355506802009701][677 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:32:36][355506802009701][677 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802009701\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58WA0RYB7F\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7711\"}'\'' -e'"" [2025-08-22 07:32:36][355506802009701][677 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:32:36][355506802009701][677 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506802009701\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58WA0RYB7F\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7711\"}'\'' -e'"" [2025-08-22 07:32:40][355506802009701][4723 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a3361156-41a4-422e-bb7c-0b501a7965db","id":"QR_a3361156-41a4-422e-bb7c-0b501a7965db","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:32:41][355506802009701][4879 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3152 [2025-08-22 07:32:41][355506802009701][4879 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-22 07:32:41][355506802009701][4879 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:35:43][353600816991418][1 ms][INFO] === Request start === [2025-08-22 07:35:43][353600816991418][2 ms][DEBUG] START check_scloud [2025-08-22 07:35:43][353600816991418][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:35:44][353600816991418][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 14334 4994 24099940 159920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:35:44][353600816991418][301 ms][DEBUG] targetPkg: running [2025-08-22 07:35:44][353600816991418][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 07:35:44][353600816991418][301 ms][DEBUG] START check_boot_completed [2025-08-22 07:35:44][353600816991418][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:35:44][353600816991418][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:35:44][353600816991418][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:35:44][353600816991418][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:35:44][353600816991418][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:35:44][353600816991418][379 ms][DEBUG] rawBody.length=1160 [2025-08-22 07:35:44][353600816991418][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600816991418\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8W100460E\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1141\"}'\'' -e'"" [2025-08-22 07:35:44][353600816991418][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:35:44][353600816991418][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600816991418\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8W100460E\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1141\"}'\'' -e'"" [2025-08-22 07:35:50][353600816991418][6690 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29d99587-59a9-498a-b97b-03c3ab35e69f","id":"QR_29d99587-59a9-498a-b97b-03c3ab35e69f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:35:50][353600816991418][6846 ms][DEBUG] proc_open done in 6466 ms; code=255; res.len=3152 [2025-08-22 07:35:50][353600816991418][6846 ms][DEBUG] END runCmdUntilRes#1 in 6467 ms [2025-08-22 07:35:50][353600816991418][6847 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:42:12][351786693575077][1 ms][INFO] === Request start === [2025-08-22 07:42:12][351786693575077][2 ms][DEBUG] START check_scloud [2025-08-22 07:42:12][351786693575077][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:42:13][351786693575077][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 14334 4994 24218812 172340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:42:13][351786693575077][299 ms][DEBUG] targetPkg: running [2025-08-22 07:42:13][351786693575077][299 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 07:42:13][351786693575077][299 ms][DEBUG] START check_boot_completed [2025-08-22 07:42:13][351786693575077][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:42:13][351786693575077][344 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 07:42:13][351786693575077][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:42:13][351786693575077][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:42:13][351786693575077][391 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 07:42:13][351786693575077][391 ms][DEBUG] START check_internet [2025-08-22 07:42:13][351786693575077][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:42:13][351786693575077][906 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.170/199.170/199.170/0.000 ms\n [2025-08-22 07:42:13][351786693575077][906 ms][DEBUG] check_internet: online [2025-08-22 07:42:13][351786693575077][906 ms][DEBUG] END check_internet in 515 ms [2025-08-22 07:42:13][351786693575077][906 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:42:13][351786693575077][906 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693575077\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10SBQYA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4091\"}'\'' -e'"" [2025-08-22 07:42:13][351786693575077][906 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:42:13][351786693575077][906 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693575077\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10SBQYA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4091\"}'\'' -e'"" [2025-08-22 07:42:17][351786693575077][5030 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e5dcdaf1-24ac-4dd8-b384-119dbf2b6e3d","id":"QR_e5dcdaf1-24ac-4dd8-b384-119dbf2b6e3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:42:18][351786693575077][5187 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 07:42:18][351786693575077][5187 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 07:42:18][351786693575077][5187 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:43:32][350142321283042][0 ms][INFO] === Request start === [2025-08-22 07:43:32][350142321283042][1 ms][DEBUG] START check_scloud [2025-08-22 07:43:32][350142321283042][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:43:33][350142321283042][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 14334 4994 24389036 184196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:43:33][350142321283042][256 ms][DEBUG] targetPkg: running [2025-08-22 07:43:33][350142321283042][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-22 07:43:33][350142321283042][256 ms][DEBUG] START check_boot_completed [2025-08-22 07:43:33][350142321283042][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:43:33][350142321283042][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:43:33][350142321283042][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:43:33][350142321283042][381 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 07:43:33][350142321283042][381 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 07:43:33][350142321283042][381 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:43:33][350142321283042][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142321283042\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y703M0GB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8683\"}'\'' -e'"" [2025-08-22 07:43:33][350142321283042][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:43:33][350142321283042][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142321283042\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y703M0GB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8683\"}'\'' -e'"" [2025-08-22 07:43:37][350142321283042][4473 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7baaf06e-e080-4f35-bc9a-b44f91347b79","id":"QR_7baaf06e-e080-4f35-bc9a-b44f91347b79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:43:37][350142321283042][4630 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 07:43:37][350142321283042][4630 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-22 07:43:37][350142321283042][4630 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:44:35][354068195494470][1 ms][INFO] === Request start === [2025-08-22 07:44:35][354068195494470][2 ms][DEBUG] START check_scloud [2025-08-22 07:44:35][354068195494470][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:44:35][354068195494470][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 14334 4994 24508560 195928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:44:35][354068195494470][305 ms][DEBUG] targetPkg: running [2025-08-22 07:44:35][354068195494470][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 07:44:35][354068195494470][305 ms][DEBUG] START check_boot_completed [2025-08-22 07:44:35][354068195494470][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:44:35][354068195494470][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:44:35][354068195494470][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:44:36][354068195494470][385 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 07:44:36][354068195494470][385 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-22 07:44:36][354068195494470][385 ms][DEBUG] START check_internet [2025-08-22 07:44:36][354068195494470][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:44:36][354068195494470][915 ms][DEBUG] SU: done in 529 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.150/201.150/201.150/0.000 ms\n [2025-08-22 07:44:36][354068195494470][915 ms][DEBUG] check_internet: online [2025-08-22 07:44:36][354068195494470][915 ms][DEBUG] END check_internet in 530 ms [2025-08-22 07:44:36][354068195494470][915 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:44:36][354068195494470][915 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195494470\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W10SLEBW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8071\"}'\'' -e'"" [2025-08-22 07:44:36][354068195494470][915 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:44:36][354068195494470][915 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068195494470\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W10SLEBW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8071\"}'\'' -e'"" [2025-08-22 07:44:40][354068195494470][5054 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d761c110-f88e-4513-9fd2-9730057e5bf6","id":"QR_d761c110-f88e-4513-9fd2-9730057e5bf6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:44:40][354068195494470][5210 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3152 [2025-08-22 07:44:40][354068195494470][5210 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-22 07:44:40][354068195494470][5210 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:46:14][358453423956480][1 ms][INFO] === Request start === [2025-08-22 07:46:14][358453423956480][2 ms][DEBUG] START check_scloud [2025-08-22 07:46:14][358453423956480][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:46:14][358453423956480][342 ms][DEBUG] SU: done in 340 ms; outu0_a118 14334 4994 24661172 208068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:46:14][358453423956480][342 ms][DEBUG] targetPkg: running [2025-08-22 07:46:14][358453423956480][342 ms][DEBUG] END check_scloud in 341 ms [2025-08-22 07:46:14][358453423956480][342 ms][DEBUG] START check_boot_completed [2025-08-22 07:46:14][358453423956480][342 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:46:15][358453423956480][389 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:46:15][358453423956480][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:46:15][358453423956480][451 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 07:46:15][358453423956480][451 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 07:46:15][358453423956480][451 ms][DEBUG] START check_internet [2025-08-22 07:46:15][358453423956480][451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:46:15][358453423956480][748 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=167 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 167.853/167.853/167.853/0.000 ms\n [2025-08-22 07:46:15][358453423956480][748 ms][DEBUG] check_internet: online [2025-08-22 07:46:15][358453423956480][748 ms][DEBUG] END check_internet in 297 ms [2025-08-22 07:46:15][358453423956480][748 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:46:15][358453423956480][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453423956480\",\"model\":\"SM-G990E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW80EEGFZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2596\"}'\'' -e'"" [2025-08-22 07:46:15][358453423956480][748 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:46:15][358453423956480][748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358453423956480\",\"model\":\"SM-G990E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW80EEGFZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2596\"}'\'' -e'"" [2025-08-22 07:46:19][358453423956480][4966 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab9a0019-bc82-40b0-83d0-d94ad09526cd","id":"QR_ab9a0019-bc82-40b0-83d0-d94ad09526cd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:46:19][358453423956480][5122 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3152 [2025-08-22 07:46:19][358453423956480][5122 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-22 07:46:19][358453423956480][5122 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:47:19][354454658047106][1 ms][INFO] === Request start === [2025-08-22 07:47:19][354454658047106][2 ms][DEBUG] START check_scloud [2025-08-22 07:47:19][354454658047106][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:47:19][354454658047106][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 14334 4994 24803608 216324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:47:19][354454658047106][266 ms][DEBUG] targetPkg: running [2025-08-22 07:47:19][354454658047106][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-22 07:47:19][354454658047106][266 ms][DEBUG] START check_boot_completed [2025-08-22 07:47:19][354454658047106][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:47:19][354454658047106][297 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:47:19][354454658047106][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:47:19][354454658047106][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:47:19][354454658047106][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:47:19][354454658047106][344 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:47:19][354454658047106][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454658047106\",\"model\":\"SM-A256B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX305VDTY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9738\"}'\'' -e'"" [2025-08-22 07:47:19][354454658047106][344 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:47:19][354454658047106][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354454658047106\",\"model\":\"SM-A256B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX305VDTY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9738\"}'\'' -e'"" [2025-08-22 07:47:24][354454658047106][4827 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_845d5b7a-0e45-4683-90b1-afdaa7d55d24","id":"QR_845d5b7a-0e45-4683-90b1-afdaa7d55d24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:47:24][354454658047106][4984 ms][DEBUG] proc_open done in 4639 ms; code=255; res.len=3152 [2025-08-22 07:47:24][354454658047106][4984 ms][DEBUG] END runCmdUntilRes#1 in 4639 ms [2025-08-22 07:47:24][354454658047106][4984 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:51:33][353238130147415][1 ms][INFO] === Request start === [2025-08-22 07:51:33][353238130147415][2 ms][DEBUG] START check_scloud [2025-08-22 07:51:33][353238130147415][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:51:34][353238130147415][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 14334 4994 24950140 228396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:51:34][353238130147415][302 ms][DEBUG] targetPkg: running [2025-08-22 07:51:34][353238130147415][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 07:51:34][353238130147415][302 ms][DEBUG] START check_boot_completed [2025-08-22 07:51:34][353238130147415][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:51:34][353238130147415][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:51:34][353238130147415][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:51:34][353238130147415][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:51:34][353238130147415][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:51:34][353238130147415][381 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:51:34][353238130147415][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5731\"}'\'' -e'"" [2025-08-22 07:51:34][353238130147415][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:51:34][353238130147415][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5731\"}'\'' -e'"" [2025-08-22 07:51:38][353238130147415][4270 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 07:51:38][353238130147415][4426 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=107 [2025-08-22 07:51:38][353238130147415][4426 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-22 07:51:38][353238130147415][4426 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 07:51:38][][0 ms][INFO] === Request start === [2025-08-22 07:51:38][][1 ms][DEBUG] START check_scloud [2025-08-22 07:51:38][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:51:38][][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 14334 4994 25092548 239188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:51:38][][259 ms][DEBUG] targetPkg: running [2025-08-22 07:51:38][][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-22 07:51:38][][259 ms][DEBUG] START check_boot_completed [2025-08-22 07:51:38][][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:51:39][][305 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:51:39][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:51:39][][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:51:39][][352 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 07:51:39][][352 ms][DEBUG] rawBody.length=1131 [2025-08-22 07:51:39][][352 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6025\"}'\'' -e'"" [2025-08-22 07:51:39][][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:51:39][][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6025\"}'\'' -e'"" [2025-08-22 07:51:42][][3992 ms][DEBUG] proc_open done in 3640 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 07:51:42][][3992 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-22 07:51:42][][3992 ms][WARN] Detected error: Process with pid 14334 either refused to load frida-agent, or terminated during injection [2025-08-22 07:51:42][][3992 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 07:51:42][][4118 ms][DEBUG] SU: done in 127 ms; out [2025-08-22 07:51:42][][4118 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 07:51:42][][4119 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 07:51:42][][4257 ms][DEBUG] SU: done in 139 ms; out [2025-08-22 07:51:42][][4257 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 07:51:43][][4413 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 07:51:45][][6428 ms][DEBUG] START check_boot_completed [2025-08-22 07:51:45][][6428 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:51:45][][6475 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:51:45][][6475 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:51:45][][6522 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:51:45][][6522 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 07:51:48][][9537 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 07:51:48][][9537 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6025\"}'\'' -e'"" [2025-08-22 07:51:51][][12661 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 07:51:51][][12817 ms][DEBUG] proc_open done in 3280 ms; code=255; res.len=107 [2025-08-22 07:51:51][][12818 ms][DEBUG] END runCmdUntilRes#2 in 3281 ms [2025-08-22 07:51:51][][12818 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 07:51:51][][0 ms][INFO] === Request start === [2025-08-22 07:51:51][][1 ms][DEBUG] START check_scloud [2025-08-22 07:51:51][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:51:52][][233 ms][DEBUG] SU: done in 232 ms; outu0_a118 15815 4994 23710328 123808 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:51:52][][233 ms][DEBUG] targetPkg: running [2025-08-22 07:51:52][][233 ms][DEBUG] END check_scloud in 232 ms [2025-08-22 07:51:52][][233 ms][DEBUG] START check_boot_completed [2025-08-22 07:51:52][][233 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:51:52][][280 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:51:52][][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:51:52][][358 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 07:51:52][][358 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 07:51:52][][358 ms][DEBUG] rawBody.length=1131 [2025-08-22 07:51:52][][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6543\"}'\'' -e'"" [2025-08-22 07:51:52][][358 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:51:52][][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6543\"}'\'' -e'"" [2025-08-22 07:51:55][][3841 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 07:51:55][][3997 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=107 [2025-08-22 07:51:55][][3998 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-22 07:51:55][][3998 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 07:51:58][353238130147415][0 ms][INFO] === Request start === [2025-08-22 07:51:58][353238130147415][1 ms][DEBUG] START check_scloud [2025-08-22 07:51:58][353238130147415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:51:58][353238130147415][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 15815 4994 23854912 135104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:51:58][353238130147415][247 ms][DEBUG] targetPkg: running [2025-08-22 07:51:58][353238130147415][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-22 07:51:58][353238130147415][247 ms][DEBUG] START check_boot_completed [2025-08-22 07:51:58][353238130147415][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:51:58][353238130147415][294 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:51:58][353238130147415][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:51:58][353238130147415][356 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 07:51:58][353238130147415][356 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 07:51:58][353238130147415][356 ms][DEBUG] rawBody.length=1160 [2025-08-22 07:51:58][353238130147415][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6017\"}'\'' -e'"" [2025-08-22 07:51:58][353238130147415][357 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:51:58][353238130147415][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6017\"}'\'' -e'"" [2025-08-22 07:52:03][353238130147415][5308 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a467d2b-498e-48b0-a75b-fc64add0c025","id":"QR_7a467d2b-498e-48b0-a75b-fc64add0c025","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:52:03][353238130147415][5464 ms][DEBUG] proc_open done in 5108 ms; code=255; res.len=3152 [2025-08-22 07:52:03][353238130147415][5464 ms][DEBUG] END runCmdUntilRes#1 in 5108 ms [2025-08-22 07:52:03][353238130147415][5465 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:54:42][353238130147415][1 ms][INFO] === Request start === [2025-08-22 07:54:42][353238130147415][2 ms][DEBUG] START check_scloud [2025-08-22 07:54:42][353238130147415][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:54:43][353238130147415][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 15815 4994 23932488 149268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:54:43][353238130147415][305 ms][DEBUG] targetPkg: running [2025-08-22 07:54:43][353238130147415][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 07:54:43][353238130147415][305 ms][DEBUG] START check_boot_completed [2025-08-22 07:54:43][353238130147415][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:54:43][353238130147415][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:54:43][353238130147415][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:54:43][353238130147415][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:54:43][353238130147415][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:54:43][353238130147415][383 ms][DEBUG] START check_internet [2025-08-22 07:54:43][353238130147415][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:54:43][353238130147415][945 ms][DEBUG] SU: done in 563 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.572/196.572/196.572/0.000 ms\n [2025-08-22 07:54:43][353238130147415][945 ms][DEBUG] check_internet: online [2025-08-22 07:54:43][353238130147415][946 ms][DEBUG] END check_internet in 563 ms [2025-08-22 07:54:43][353238130147415][946 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:54:43][353238130147415][946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6322\"}'\'' -e'"" [2025-08-22 07:54:43][353238130147415][946 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:54:43][353238130147415][946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6322\"}'\'' -e'"" [2025-08-22 07:54:47][353238130147415][4679 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 07:54:47][353238130147415][4835 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=107 [2025-08-22 07:54:47][353238130147415][4835 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-22 07:54:47][353238130147415][4835 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 07:54:48][][0 ms][INFO] === Request start === [2025-08-22 07:54:48][][1 ms][DEBUG] START check_scloud [2025-08-22 07:54:48][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:54:48][][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 15815 4994 24066320 160136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:54:48][][266 ms][DEBUG] targetPkg: running [2025-08-22 07:54:48][][266 ms][DEBUG] END check_scloud in 265 ms [2025-08-22 07:54:48][][266 ms][DEBUG] START check_boot_completed [2025-08-22 07:54:48][][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:54:48][][297 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 07:54:48][][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:54:48][][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 07:54:48][][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 07:54:48][][344 ms][DEBUG] START check_internet [2025-08-22 07:54:48][][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:54:48][][641 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=152 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 152.828/152.828/152.828/0.000 ms\n [2025-08-22 07:54:48][][641 ms][DEBUG] check_internet: online [2025-08-22 07:54:48][][641 ms][DEBUG] END check_internet in 297 ms [2025-08-22 07:54:48][][641 ms][DEBUG] rawBody.length=1131 [2025-08-22 07:54:48][][641 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7188\"}'\'' -e'"" [2025-08-22 07:54:48][][641 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:54:48][][641 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7188\"}'\'' -e'"" [2025-08-22 07:54:52][][4030 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 07:54:52][][4186 ms][DEBUG] proc_open done in 3545 ms; code=255; res.len=107 [2025-08-22 07:54:52][][4186 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-08-22 07:54:52][][4186 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 07:54:52][][0 ms][INFO] === Request start === [2025-08-22 07:54:52][][1 ms][DEBUG] START check_scloud [2025-08-22 07:54:52][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:54:52][][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 15815 4994 24215064 171076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:54:52][][292 ms][DEBUG] targetPkg: running [2025-08-22 07:54:52][][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-22 07:54:52][][292 ms][DEBUG] START check_boot_completed [2025-08-22 07:54:52][][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:54:52][][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:54:52][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:54:53][][401 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 07:54:53][][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 07:54:53][][402 ms][DEBUG] START check_internet [2025-08-22 07:54:53][][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:54:53][][683 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=150 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 150.409/150.409/150.409/0.000 ms\n [2025-08-22 07:54:53][][683 ms][DEBUG] check_internet: online [2025-08-22 07:54:53][][683 ms][DEBUG] END check_internet in 281 ms [2025-08-22 07:54:53][][683 ms][DEBUG] rawBody.length=1131 [2025-08-22 07:54:53][][683 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4526\"}'\'' -e'"" [2025-08-22 07:54:53][][683 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:54:53][][683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4526\"}'\'' -e'"" [2025-08-22 07:54:56][][4025 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 07:54:56][][4182 ms][DEBUG] proc_open done in 3498 ms; code=255; res.len=107 [2025-08-22 07:54:56][][4182 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-22 07:54:56][][4182 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 07:54:59][353238130147415][0 ms][INFO] === Request start === [2025-08-22 07:54:59][353238130147415][1 ms][DEBUG] START check_scloud [2025-08-22 07:54:59][353238130147415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:54:59][353238130147415][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 15815 4994 24388128 182716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:54:59][353238130147415][295 ms][DEBUG] targetPkg: running [2025-08-22 07:54:59][353238130147415][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-22 07:54:59][353238130147415][295 ms][DEBUG] START check_boot_completed [2025-08-22 07:54:59][353238130147415][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:54:59][353238130147415][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:54:59][353238130147415][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:54:59][353238130147415][404 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 07:54:59][353238130147415][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 07:54:59][353238130147415][404 ms][DEBUG] START check_internet [2025-08-22 07:54:59][353238130147415][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:54:59][353238130147415][795 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.755/240.755/240.755/0.000 ms\n [2025-08-22 07:54:59][353238130147415][795 ms][DEBUG] check_internet: online [2025-08-22 07:54:59][353238130147415][795 ms][DEBUG] END check_internet in 391 ms [2025-08-22 07:54:59][353238130147415][795 ms][DEBUG] rawBody.length=1160 [2025-08-22 07:54:59][353238130147415][795 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8158\"}'\'' -e'"" [2025-08-22 07:54:59][353238130147415][795 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:54:59][353238130147415][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8158\"}'\'' -e'"" [2025-08-22 07:55:06][353238130147415][7574 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_930882de-7e21-4f7a-938b-4d8d5289a444","id":"QR_930882de-7e21-4f7a-938b-4d8d5289a444","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:55:06][353238130147415][7730 ms][DEBUG] proc_open done in 6935 ms; code=255; res.len=3152 [2025-08-22 07:55:06][353238130147415][7730 ms][DEBUG] END runCmdUntilRes#1 in 6935 ms [2025-08-22 07:55:06][353238130147415][7730 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:58:08][352384571301037][1 ms][INFO] === Request start === [2025-08-22 07:58:08][352384571301037][2 ms][DEBUG] START check_scloud [2025-08-22 07:58:08][352384571301037][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:58:09][352384571301037][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 15815 4994 24459928 194064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:58:09][352384571301037][318 ms][DEBUG] targetPkg: running [2025-08-22 07:58:09][352384571301037][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 07:58:09][352384571301037][318 ms][DEBUG] START check_boot_completed [2025-08-22 07:58:09][352384571301037][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:58:09][352384571301037][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 07:58:09][352384571301037][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:58:09][352384571301037][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 07:58:09][352384571301037][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 07:58:09][352384571301037][428 ms][DEBUG] START check_internet [2025-08-22 07:58:09][352384571301037][428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 07:58:09][352384571301037][786 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.217/253.217/253.217/0.000 ms\n [2025-08-22 07:58:09][352384571301037][786 ms][DEBUG] check_internet: online [2025-08-22 07:58:09][352384571301037][786 ms][DEBUG] END check_internet in 359 ms [2025-08-22 07:58:09][352384571301037][786 ms][DEBUG] rawBody.length=1161 [2025-08-22 07:58:09][352384571301037][786 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384571301037\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8X300MSCA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8488\"}'\'' -e'"" [2025-08-22 07:58:09][352384571301037][787 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:58:09][352384571301037][787 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352384571301037\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8X300MSCA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8488\"}'\'' -e'"" [2025-08-22 07:58:14][352384571301037][5176 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cedd5bab-b404-4067-9694-8e0bcf21bd19","id":"QR_cedd5bab-b404-4067-9694-8e0bcf21bd19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:58:14][352384571301037][5332 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3152 [2025-08-22 07:58:14][352384571301037][5332 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-08-22 07:58:14][352384571301037][5332 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 07:59:10][355183113502582][0 ms][INFO] === Request start === [2025-08-22 07:59:10][355183113502582][1 ms][DEBUG] START check_scloud [2025-08-22 07:59:10][355183113502582][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 07:59:11][355183113502582][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 15815 4994 24563580 206472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 07:59:11][355183113502582][307 ms][DEBUG] targetPkg: running [2025-08-22 07:59:11][355183113502582][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 07:59:11][355183113502582][307 ms][DEBUG] START check_boot_completed [2025-08-22 07:59:11][355183113502582][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 07:59:11][355183113502582][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 07:59:11][355183113502582][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 07:59:11][355183113502582][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 07:59:11][355183113502582][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 07:59:11][355183113502582][402 ms][DEBUG] rawBody.length=1160 [2025-08-22 07:59:11][355183113502582][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355183113502582\",\"model\":\"SM-A716U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CN609DZXA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4913\"}'\'' -e'"" [2025-08-22 07:59:11][355183113502582][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 07:59:11][355183113502582][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355183113502582\",\"model\":\"SM-A716U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CN609DZXA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4913\"}'\'' -e'"" [2025-08-22 07:59:16][355183113502582][5759 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9bd204c1-eb20-4575-b6bc-3fc7c8122508","id":"QR_9bd204c1-eb20-4575-b6bc-3fc7c8122508","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 07:59:16][355183113502582][5915 ms][DEBUG] proc_open done in 5512 ms; code=255; res.len=3152 [2025-08-22 07:59:16][355183113502582][5915 ms][DEBUG] END runCmdUntilRes#1 in 5513 ms [2025-08-22 07:59:16][355183113502582][5915 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:06:05][353238130147415][1 ms][INFO] === Request start === [2025-08-22 08:06:05][353238130147415][2 ms][DEBUG] START check_scloud [2025-08-22 08:06:05][353238130147415][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:06:05][353238130147415][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 15815 4994 24653716 217592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:06:05][353238130147415][305 ms][DEBUG] targetPkg: running [2025-08-22 08:06:05][353238130147415][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 08:06:05][353238130147415][305 ms][DEBUG] START check_boot_completed [2025-08-22 08:06:05][353238130147415][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:06:05][353238130147415][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:06:05][353238130147415][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:06:05][353238130147415][446 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 08:06:05][353238130147415][446 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 08:06:05][353238130147415][446 ms][DEBUG] START check_internet [2025-08-22 08:06:05][353238130147415][446 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:06:06][353238130147415][993 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.130/201.130/201.130/0.000 ms\n [2025-08-22 08:06:06][353238130147415][993 ms][DEBUG] check_internet: online [2025-08-22 08:06:06][353238130147415][993 ms][DEBUG] END check_internet in 547 ms [2025-08-22 08:06:06][353238130147415][993 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:06:06][353238130147415][993 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6400\"}'\'' -e'"" [2025-08-22 08:06:06][353238130147415][993 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:06:06][353238130147415][993 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6400\"}'\'' -e'"" [2025-08-22 08:06:10][353238130147415][5070 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 08:06:10][353238130147415][5226 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=107 [2025-08-22 08:06:10][353238130147415][5226 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-22 08:06:10][353238130147415][5226 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 08:06:11][][0 ms][INFO] === Request start === [2025-08-22 08:06:11][][1 ms][DEBUG] START check_scloud [2025-08-22 08:06:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:06:11][][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 15815 4994 24867132 229568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:06:11][][304 ms][DEBUG] targetPkg: running [2025-08-22 08:06:11][][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 08:06:11][][304 ms][DEBUG] START check_boot_completed [2025-08-22 08:06:11][][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:06:11][][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 08:06:11][][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:06:11][][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:06:11][][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 08:06:11][][382 ms][DEBUG] START check_internet [2025-08-22 08:06:11][][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:06:11][][647 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=126 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 126.883/126.883/126.883/0.000 ms\n [2025-08-22 08:06:11][][647 ms][DEBUG] check_internet: online [2025-08-22 08:06:11][][648 ms][DEBUG] END check_internet in 266 ms [2025-08-22 08:06:11][][648 ms][DEBUG] rawBody.length=1131 [2025-08-22 08:06:11][][648 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4344\"}'\'' -e'"" [2025-08-22 08:06:11][][648 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:06:11][][648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4344\"}'\'' -e'"" [2025-08-22 08:06:15][][4193 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 08:06:15][][4349 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=107 [2025-08-22 08:06:15][][4349 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-22 08:06:15][][4349 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 08:06:15][][0 ms][INFO] === Request start === [2025-08-22 08:06:15][][1 ms][DEBUG] START check_scloud [2025-08-22 08:06:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:06:16][][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 15815 4994 25042376 239624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:06:16][][274 ms][DEBUG] targetPkg: running [2025-08-22 08:06:16][][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-22 08:06:16][][274 ms][DEBUG] START check_boot_completed [2025-08-22 08:06:16][][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:06:16][][305 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 08:06:16][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:06:16][][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:06:16][][352 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 08:06:16][][352 ms][DEBUG] START check_internet [2025-08-22 08:06:16][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:06:16][][602 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.188/141.188/141.188/0.000 ms\n [2025-08-22 08:06:16][][602 ms][DEBUG] check_internet: online [2025-08-22 08:06:16][][602 ms][DEBUG] END check_internet in 250 ms [2025-08-22 08:06:16][][602 ms][DEBUG] rawBody.length=1131 [2025-08-22 08:06:16][][602 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5677\"}'\'' -e'"" [2025-08-22 08:06:16][][602 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:06:16][][602 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5677\"}'\'' -e'"" [2025-08-22 08:06:20][][4320 ms][DEBUG] proc_open done in 3718 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 08:06:20][][4320 ms][DEBUG] END runCmdUntilRes#1 in 3718 ms [2025-08-22 08:06:20][][4320 ms][WARN] Detected error: Process with pid 15815 either refused to load frida-agent, or terminated during injection [2025-08-22 08:06:20][][4320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 08:06:20][][4476 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 08:06:20][][4476 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 08:06:20][][4476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 08:06:20][][4601 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 08:06:20][][4601 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 08:06:20][][4773 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 08:06:22][][6788 ms][DEBUG] START check_boot_completed [2025-08-22 08:06:22][][6788 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:06:22][][6835 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:06:22][][6835 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:06:22][][6884 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 08:06:22][][6884 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-22 08:06:25][][9896 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 08:06:25][][9897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5677\"}'\'' -e'"" [2025-08-22 08:06:29][][13521 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 08:06:29][][13677 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=107 [2025-08-22 08:06:29][][13677 ms][DEBUG] END runCmdUntilRes#2 in 3780 ms [2025-08-22 08:06:29][][13677 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 08:06:31][353238130147415][0 ms][INFO] === Request start === [2025-08-22 08:06:31][353238130147415][1 ms][DEBUG] START check_scloud [2025-08-22 08:06:31][353238130147415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:06:32][353238130147415][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 17786 4994 23701852 123408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:06:32][353238130147415][254 ms][DEBUG] targetPkg: running [2025-08-22 08:06:32][353238130147415][254 ms][DEBUG] END check_scloud in 253 ms [2025-08-22 08:06:32][353238130147415][254 ms][DEBUG] START check_boot_completed [2025-08-22 08:06:32][353238130147415][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:06:32][353238130147415][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:06:32][353238130147415][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:06:32][353238130147415][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:06:32][353238130147415][347 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 08:06:32][353238130147415][347 ms][DEBUG] START check_internet [2025-08-22 08:06:32][353238130147415][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:06:32][353238130147415][581 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.382/145.382/145.382/0.000 ms\n [2025-08-22 08:06:32][353238130147415][582 ms][DEBUG] check_internet: online [2025-08-22 08:06:32][353238130147415][582 ms][DEBUG] END check_internet in 235 ms [2025-08-22 08:06:32][353238130147415][582 ms][DEBUG] rawBody.length=1160 [2025-08-22 08:06:32][353238130147415][582 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8525\"}'\'' -e'"" [2025-08-22 08:06:32][353238130147415][582 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:06:32][353238130147415][582 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8525\"}'\'' -e'"" [2025-08-22 08:06:37][353238130147415][6080 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1f5c40f4-27db-444f-bc6d-816729107ac2","id":"QR_1f5c40f4-27db-444f-bc6d-816729107ac2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:06:38][353238130147415][6236 ms][DEBUG] proc_open done in 5654 ms; code=255; res.len=3152 [2025-08-22 08:06:38][353238130147415][6236 ms][DEBUG] END runCmdUntilRes#1 in 5654 ms [2025-08-22 08:06:38][353238130147415][6236 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:08:36][351537270648898][1 ms][INFO] === Request start === [2025-08-22 08:08:36][351537270648898][2 ms][DEBUG] START check_scloud [2025-08-22 08:08:36][351537270648898][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:08:36][351537270648898][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 17786 4994 23776392 136916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:08:36][351537270648898][313 ms][DEBUG] targetPkg: running [2025-08-22 08:08:36][351537270648898][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 08:08:36][351537270648898][313 ms][DEBUG] START check_boot_completed [2025-08-22 08:08:36][351537270648898][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:08:36][351537270648898][375 ms][DEBUG] ADB: done in 62 ms; out [2025-08-22 08:08:36][351537270648898][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:08:37][351537270648898][423 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:08:37][351537270648898][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:08:37][351537270648898][423 ms][DEBUG] START check_internet [2025-08-22 08:08:37][351537270648898][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:08:37][351537270648898][782 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=248 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 248.862/248.862/248.862/0.000 ms\n [2025-08-22 08:08:37][351537270648898][782 ms][DEBUG] check_internet: online [2025-08-22 08:08:37][351537270648898][782 ms][DEBUG] END check_internet in 359 ms [2025-08-22 08:08:37][351537270648898][782 ms][DEBUG] rawBody.length=1160 [2025-08-22 08:08:37][351537270648898][782 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537270648898\",\"model\":\"SM-A356E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX40878FP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2556\"}'\'' -e'"" [2025-08-22 08:08:37][351537270648898][782 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:08:37][351537270648898][782 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351537270648898\",\"model\":\"SM-A356E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX40878FP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2556\"}'\'' -e'"" [2025-08-22 08:08:43][351537270648898][7155 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9dabfe8b-66ce-4444-a33a-2d727a78e8e2","id":"QR_9dabfe8b-66ce-4444-a33a-2d727a78e8e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:08:43][351537270648898][7311 ms][DEBUG] proc_open done in 6529 ms; code=255; res.len=3152 [2025-08-22 08:08:43][351537270648898][7311 ms][DEBUG] END runCmdUntilRes#1 in 6529 ms [2025-08-22 08:08:43][351537270648898][7312 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:09:25][356740313696859][0 ms][INFO] === Request start === [2025-08-22 08:09:25][356740313696859][1 ms][DEBUG] START check_scloud [2025-08-22 08:09:25][356740313696859][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:09:25][356740313696859][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 17786 4994 23923052 148828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:09:25][356740313696859][294 ms][DEBUG] targetPkg: running [2025-08-22 08:09:25][356740313696859][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 08:09:25][356740313696859][294 ms][DEBUG] START check_boot_completed [2025-08-22 08:09:25][356740313696859][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:09:25][356740313696859][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 08:09:25][356740313696859][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:09:25][356740313696859][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:09:25][356740313696859][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 08:09:25][356740313696859][372 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:09:25][356740313696859][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356740313696859\",\"model\":\"SM-A236B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT92835BZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9385\"}'\'' -e'"" [2025-08-22 08:09:25][356740313696859][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:09:25][356740313696859][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356740313696859\",\"model\":\"SM-A236B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT92835BZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9385\"}'\'' -e'"" [2025-08-22 08:09:30][356740313696859][4777 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_adb34560-2078-468f-961f-ad17f7b5402d","id":"QR_adb34560-2078-468f-961f-ad17f7b5402d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:09:30][356740313696859][4933 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3152 [2025-08-22 08:09:30][356740313696859][4934 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-08-22 08:09:30][356740313696859][4934 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:10:44][353238130147415][1 ms][INFO] === Request start === [2025-08-22 08:10:44][353238130147415][2 ms][DEBUG] START check_scloud [2025-08-22 08:10:44][353238130147415][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:10:44][353238130147415][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 17786 4994 24026448 159680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:10:44][353238130147415][312 ms][DEBUG] targetPkg: running [2025-08-22 08:10:44][353238130147415][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 08:10:44][353238130147415][312 ms][DEBUG] START check_boot_completed [2025-08-22 08:10:44][353238130147415][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:10:44][353238130147415][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:10:44][353238130147415][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:10:44][353238130147415][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:10:44][353238130147415][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:10:44][353238130147415][422 ms][DEBUG] START check_internet [2025-08-22 08:10:44][353238130147415][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:10:44][353238130147415][890 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.656/200.656/200.656/0.000 ms\n [2025-08-22 08:10:44][353238130147415][890 ms][DEBUG] check_internet: online [2025-08-22 08:10:44][353238130147415][890 ms][DEBUG] END check_internet in 469 ms [2025-08-22 08:10:44][353238130147415][890 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:10:44][353238130147415][890 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1283\"}'\'' -e'"" [2025-08-22 08:10:44][353238130147415][890 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:10:44][353238130147415][890 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1283\"}'\'' -e'"" [2025-08-22 08:10:48][353238130147415][4717 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 08:10:48][353238130147415][4873 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=107 [2025-08-22 08:10:48][353238130147415][4873 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-22 08:10:48][353238130147415][4873 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 08:10:49][][0 ms][INFO] === Request start === [2025-08-22 08:10:49][][1 ms][DEBUG] START check_scloud [2025-08-22 08:10:49][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:10:49][][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 17786 4994 24207120 170632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:10:49][][260 ms][DEBUG] targetPkg: running [2025-08-22 08:10:49][][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-22 08:10:49][][260 ms][DEBUG] START check_boot_completed [2025-08-22 08:10:49][][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:10:49][][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:10:49][][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:10:49][][370 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:10:49][][370 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:10:49][][370 ms][DEBUG] START check_internet [2025-08-22 08:10:49][][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:10:49][][651 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.029/144.029/144.029/0.000 ms\n [2025-08-22 08:10:49][][651 ms][DEBUG] check_internet: online [2025-08-22 08:10:49][][651 ms][DEBUG] END check_internet in 281 ms [2025-08-22 08:10:49][][651 ms][DEBUG] rawBody.length=1131 [2025-08-22 08:10:49][][651 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1823\"}'\'' -e'"" [2025-08-22 08:10:49][][651 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:10:49][][651 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1823\"}'\'' -e'"" [2025-08-22 08:10:53][][4009 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 08:10:53][][4165 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=107 [2025-08-22 08:10:53][][4165 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-08-22 08:10:53][][4165 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 08:10:53][][0 ms][INFO] === Request start === [2025-08-22 08:10:53][][1 ms][DEBUG] START check_scloud [2025-08-22 08:10:53][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:10:54][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 17786 4994 24337432 182552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:10:54][][311 ms][DEBUG] targetPkg: running [2025-08-22 08:10:54][][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 08:10:54][][311 ms][DEBUG] START check_boot_completed [2025-08-22 08:10:54][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:10:54][][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:10:54][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:10:54][][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:10:54][][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 08:10:54][][404 ms][DEBUG] START check_internet [2025-08-22 08:10:54][][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:10:54][][670 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.722/142.722/142.722/0.000 ms\n [2025-08-22 08:10:54][][670 ms][DEBUG] check_internet: online [2025-08-22 08:10:54][][670 ms][DEBUG] END check_internet in 266 ms [2025-08-22 08:10:54][][670 ms][DEBUG] rawBody.length=1131 [2025-08-22 08:10:54][][670 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3434\"}'\'' -e'"" [2025-08-22 08:10:54][][670 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:10:54][][670 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S908N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3434\"}'\'' -e'"" [2025-08-22 08:10:57][][3981 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 08:10:57][][4137 ms][DEBUG] proc_open done in 3467 ms; code=255; res.len=107 [2025-08-22 08:10:57][][4137 ms][DEBUG] END runCmdUntilRes#1 in 3467 ms [2025-08-22 08:10:57][][4137 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 08:11:00][353238130147415][0 ms][INFO] === Request start === [2025-08-22 08:11:00][353238130147415][1 ms][DEBUG] START check_scloud [2025-08-22 08:11:00][353238130147415][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:11:00][353238130147415][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 17786 4994 24502560 194380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:11:00][353238130147415][314 ms][DEBUG] targetPkg: running [2025-08-22 08:11:00][353238130147415][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 08:11:00][353238130147415][314 ms][DEBUG] START check_boot_completed [2025-08-22 08:11:00][353238130147415][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:11:00][353238130147415][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:11:00][353238130147415][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:11:00][353238130147415][409 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 08:11:00][353238130147415][409 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 08:11:00][353238130147415][409 ms][DEBUG] rawBody.length=1160 [2025-08-22 08:11:00][353238130147415][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7056\"}'\'' -e'"" [2025-08-22 08:11:00][353238130147415][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:11:00][353238130147415][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7056\"}'\'' -e'"" [2025-08-22 08:11:06][353238130147415][5797 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8df848e8-a7f9-4f36-982a-50f4b295fc19","id":"QR_8df848e8-a7f9-4f36-982a-50f4b295fc19","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:11:06][353238130147415][5953 ms][DEBUG] proc_open done in 5544 ms; code=255; res.len=3152 [2025-08-22 08:11:06][353238130147415][5953 ms][DEBUG] END runCmdUntilRes#1 in 5544 ms [2025-08-22 08:11:06][353238130147415][5953 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:15:09][354455941052100][1 ms][INFO] === Request start === [2025-08-22 08:15:09][354455941052100][2 ms][DEBUG] START check_scloud [2025-08-22 08:15:09][354455941052100][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:15:09][354455941052100][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 17786 4994 24616344 205528 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:15:09][354455941052100][262 ms][DEBUG] targetPkg: running [2025-08-22 08:15:09][354455941052100][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-22 08:15:09][354455941052100][262 ms][DEBUG] START check_boot_completed [2025-08-22 08:15:09][354455941052100][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:15:09][354455941052100][293 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 08:15:09][354455941052100][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:15:09][354455941052100][340 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:15:09][354455941052100][340 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 08:15:09][354455941052100][340 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:15:09][354455941052100][340 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354455941052100\",\"model\":\"SM-A515F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N60WRDJX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9360\"}'\'' -e'"" [2025-08-22 08:15:09][354455941052100][340 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:15:09][354455941052100][340 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354455941052100\",\"model\":\"SM-A515F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N60WRDJX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9360\"}'\'' -e'"" [2025-08-22 08:15:13][354455941052100][4527 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f340b722-82a0-4f1a-ab0d-f812f472b01e","id":"QR_f340b722-82a0-4f1a-ab0d-f812f472b01e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:15:13][354455941052100][4683 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3152 [2025-08-22 08:15:13][354455941052100][4683 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-22 08:15:13][354455941052100][4683 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:17:07][359044474100018][1 ms][INFO] === Request start === [2025-08-22 08:17:07][359044474100018][2 ms][DEBUG] START check_scloud [2025-08-22 08:17:07][359044474100018][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:17:07][359044474100018][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 17786 4994 24781436 216668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:17:07][359044474100018][302 ms][DEBUG] targetPkg: running [2025-08-22 08:17:07][359044474100018][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 08:17:07][359044474100018][302 ms][DEBUG] START check_boot_completed [2025-08-22 08:17:07][359044474100018][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:17:07][359044474100018][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:17:07][359044474100018][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:17:07][359044474100018][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:17:07][359044474100018][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 08:17:07][359044474100018][396 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:17:07][359044474100018][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359044474100018\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8Y500JR3V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7764\"}'\'' -e'"" [2025-08-22 08:17:07][359044474100018][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:17:07][359044474100018][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359044474100018\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8Y500JR3V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7764\"}'\'' -e'"" [2025-08-22 08:17:11][359044474100018][4582 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee336441-4d83-4848-b28c-04ded55d1c5d","id":"QR_ee336441-4d83-4848-b28c-04ded55d1c5d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:17:11][359044474100018][4738 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3152 [2025-08-22 08:17:11][359044474100018][4738 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-22 08:17:11][359044474100018][4738 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:17:50][351877477801266][0 ms][INFO] === Request start === [2025-08-22 08:17:50][351877477801266][1 ms][DEBUG] START check_scloud [2025-08-22 08:17:50][351877477801266][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:17:50][351877477801266][269 ms][DEBUG] SU: done in 268 ms; outu0_a118 17786 4994 24921824 228260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:17:50][351877477801266][269 ms][DEBUG] targetPkg: running [2025-08-22 08:17:50][351877477801266][269 ms][DEBUG] END check_scloud in 268 ms [2025-08-22 08:17:50][351877477801266][269 ms][DEBUG] START check_boot_completed [2025-08-22 08:17:50][351877477801266][269 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:17:50][351877477801266][316 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:17:50][351877477801266][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:17:50][351877477801266][362 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:17:50][351877477801266][362 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 08:17:50][351877477801266][362 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:17:50][351877477801266][362 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477801266\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T90QMMJM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-08-22 08:17:50][351877477801266][363 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:17:50][351877477801266][363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877477801266\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T90QMMJM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9202\"}'\'' -e'"" [2025-08-22 08:17:54][351877477801266][4315 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2068af33-e151-417a-8271-a6bca5fe3117","id":"QR_2068af33-e151-417a-8271-a6bca5fe3117","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:17:54][351877477801266][4471 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3152 [2025-08-22 08:17:54][351877477801266][4471 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-22 08:17:54][351877477801266][4471 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:18:05][352288960709983][0 ms][INFO] === Request start === [2025-08-22 08:18:05][352288960709983][1 ms][DEBUG] START check_scloud [2025-08-22 08:18:05][352288960709983][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:18:06][352288960709983][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 17786 4994 25067880 239236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:18:06][352288960709983][253 ms][DEBUG] targetPkg: running [2025-08-22 08:18:06][352288960709983][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-22 08:18:06][352288960709983][253 ms][DEBUG] START check_boot_completed [2025-08-22 08:18:06][352288960709983][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:18:06][352288960709983][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:18:06][352288960709983][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:18:06][352288960709983][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:18:06][352288960709983][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 08:18:06][352288960709983][346 ms][DEBUG] START check_internet [2025-08-22 08:18:06][352288960709983][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:18:06][352288960709983][799 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.417/201.417/201.417/0.000 ms\n [2025-08-22 08:18:06][352288960709983][799 ms][DEBUG] check_internet: online [2025-08-22 08:18:06][352288960709983][799 ms][DEBUG] END check_internet in 453 ms [2025-08-22 08:18:06][352288960709983][799 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:18:06][352288960709983][799 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960709983\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T33NDCAJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4253\"}'\'' -e'"" [2025-08-22 08:18:06][352288960709983][799 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:18:06][352288960709983][799 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960709983\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T33NDCAJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4253\"}'\'' -e'"" [2025-08-22 08:18:10][352288960709983][4563 ms][DEBUG] proc_open done in 3764 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 08:18:10][352288960709983][4563 ms][DEBUG] END runCmdUntilRes#1 in 3764 ms [2025-08-22 08:18:10][352288960709983][4563 ms][WARN] Detected error: Process with pid 17786 either refused to load frida-agent, or terminated during injection [2025-08-22 08:18:10][352288960709983][4563 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 08:18:10][352288960709983][4704 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 08:18:10][352288960709983][4704 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 08:18:10][352288960709983][4704 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 08:18:10][352288960709983][4860 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 08:18:10][352288960709983][4860 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 08:18:10][352288960709983][5001 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 08:18:12][352288960709983][7016 ms][DEBUG] START check_boot_completed [2025-08-22 08:18:12][352288960709983][7016 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:18:12][352288960709983][7063 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:18:12][352288960709983][7063 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:18:13][352288960709983][7157 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 08:18:13][352288960709983][7157 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-22 08:18:16][352288960709983][10171 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 08:18:16][352288960709983][10171 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288960709983\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T33NDCAJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4253\"}'\'' -e'"" [2025-08-22 08:18:20][352288960709983][14436 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4113c2a4-7e50-4eef-8e1f-1a162b58f63a","id":"QR_4113c2a4-7e50-4eef-8e1f-1a162b58f63a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:18:20][352288960709983][14592 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3152 [2025-08-22 08:18:20][352288960709983][14592 ms][DEBUG] END runCmdUntilRes#2 in 4421 ms [2025-08-22 08:18:20][352288960709983][14593 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:20:11][355458542253167][1 ms][INFO] === Request start === [2025-08-22 08:20:11][355458542253167][2 ms][DEBUG] START check_scloud [2025-08-22 08:20:11][355458542253167][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:20:12][355458542253167][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 19792 4994 23604744 126200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:20:12][355458542253167][312 ms][DEBUG] targetPkg: running [2025-08-22 08:20:12][355458542253167][312 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 08:20:12][355458542253167][312 ms][DEBUG] START check_boot_completed [2025-08-22 08:20:12][355458542253167][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:20:12][355458542253167][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:20:12][355458542253167][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:20:12][355458542253167][436 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 08:20:12][355458542253167][437 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 08:20:12][355458542253167][437 ms][DEBUG] START check_internet [2025-08-22 08:20:12][355458542253167][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:20:12][355458542253167][1014 ms][DEBUG] SU: done in 578 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.959/201.959/201.959/0.000 ms\n [2025-08-22 08:20:12][355458542253167][1015 ms][DEBUG] check_internet: online [2025-08-22 08:20:12][355458542253167][1015 ms][DEBUG] END check_internet in 578 ms [2025-08-22 08:20:12][355458542253167][1015 ms][DEBUG] rawBody.length=1160 [2025-08-22 08:20:12][355458542253167][1015 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355458542253167\",\"model\":\"SM-X900\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T10C9W3Y\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6040\"}'\'' -e'"" [2025-08-22 08:20:12][355458542253167][1015 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:20:12][355458542253167][1015 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355458542253167\",\"model\":\"SM-X900\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T10C9W3Y\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SER\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6040\"}'\'' -e'"" [2025-08-22 08:20:16][355458542253167][5013 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13da5655-2f7f-4979-b85e-25a22dd45d7c","id":"QR_13da5655-2f7f-4979-b85e-25a22dd45d7c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:20:17][355458542253167][5170 ms][DEBUG] proc_open done in 4154 ms; code=255; res.len=3152 [2025-08-22 08:20:17][355458542253167][5170 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-22 08:20:17][355458542253167][5170 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:20:23][350247872010411][0 ms][INFO] === Request start === [2025-08-22 08:20:23][350247872010411][0 ms][DEBUG] START check_scloud [2025-08-22 08:20:23][350247872010411][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:20:23][350247872010411][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 19792 4994 23771664 136956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:20:23][350247872010411][280 ms][DEBUG] targetPkg: running [2025-08-22 08:20:23][350247872010411][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-22 08:20:23][350247872010411][280 ms][DEBUG] START check_boot_completed [2025-08-22 08:20:23][350247872010411][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:20:23][350247872010411][326 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:20:23][350247872010411][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:20:23][350247872010411][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:20:23][350247872010411][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 08:20:23][350247872010411][373 ms][DEBUG] START check_internet [2025-08-22 08:20:23][350247872010411][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:20:24][350247872010411][719 ms][DEBUG] SU: done in 345 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.492/240.492/240.492/0.000 ms\n [2025-08-22 08:20:24][350247872010411][719 ms][DEBUG] check_internet: online [2025-08-22 08:20:24][350247872010411][719 ms][DEBUG] END check_internet in 346 ms [2025-08-22 08:20:24][350247872010411][719 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:20:24][350247872010411][719 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247872010411\",\"model\":\"SM-N980F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N80WTHAV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8446\"}'\'' -e'"" [2025-08-22 08:20:24][350247872010411][719 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:20:24][350247872010411][719 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247872010411\",\"model\":\"SM-N980F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N80WTHAV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8446\"}'\'' -e'"" [2025-08-22 08:20:27][350247872010411][4497 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d9d3203e-06a9-4b78-8285-0e167310b0b9","id":"QR_d9d3203e-06a9-4b78-8285-0e167310b0b9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:20:28][350247872010411][4653 ms][DEBUG] proc_open done in 3934 ms; code=255; res.len=3152 [2025-08-22 08:20:28][350247872010411][4653 ms][DEBUG] END runCmdUntilRes#1 in 3934 ms [2025-08-22 08:20:28][350247872010411][4653 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:23:20][351977560650438][1 ms][INFO] === Request start === [2025-08-22 08:23:20][351977560650438][2 ms][DEBUG] START check_scloud [2025-08-22 08:23:20][351977560650438][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:23:21][351977560650438][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 19792 4994 23935660 149216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:23:21][351977560650438][310 ms][DEBUG] targetPkg: running [2025-08-22 08:23:21][351977560650438][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 08:23:21][351977560650438][310 ms][DEBUG] START check_boot_completed [2025-08-22 08:23:21][351977560650438][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:23:21][351977560650438][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:23:21][351977560650438][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:23:21][351977560650438][419 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:23:21][351977560650438][419 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:23:21][351977560650438][419 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:23:21][351977560650438][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351977560650438\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8X800DKEY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9745\"}'\'' -e'"" [2025-08-22 08:23:21][351977560650438][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:23:21][351977560650438][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351977560650438\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8X800DKEY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9745\"}'\'' -e'"" [2025-08-22 08:23:25][351977560650438][4543 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_183534b2-3840-4104-a3ce-f7a30550e2e9","id":"QR_183534b2-3840-4104-a3ce-f7a30550e2e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:23:25][351977560650438][4699 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 08:23:25][351977560650438][4700 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 08:23:25][351977560650438][4700 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:25:08][353684140209978][1 ms][INFO] === Request start === [2025-08-22 08:25:08][353684140209978][2 ms][DEBUG] START check_scloud [2025-08-22 08:25:08][353684140209978][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:25:08][353684140209978][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 19792 4994 24047504 160836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:25:08][353684140209978][313 ms][DEBUG] targetPkg: running [2025-08-22 08:25:08][353684140209978][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 08:25:08][353684140209978][313 ms][DEBUG] START check_boot_completed [2025-08-22 08:25:08][353684140209978][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:25:08][353684140209978][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:25:08][353684140209978][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:25:08][353684140209978][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:25:08][353684140209978][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 08:25:08][353684140209978][407 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:25:08][353684140209978][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140209978\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y50PHFYJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6166\"}'\'' -e'"" [2025-08-22 08:25:08][353684140209978][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:25:08][353684140209978][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140209978\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y50PHFYJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6166\"}'\'' -e'"" [2025-08-22 08:25:12][353684140209978][4593 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b5676e31-ab46-4749-8ac0-997667506579","id":"QR_b5676e31-ab46-4749-8ac0-997667506579","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:25:12][353684140209978][4749 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3152 [2025-08-22 08:25:12][353684140209978][4749 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-22 08:25:12][353684140209978][4750 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:30:16][352334102165559][1 ms][INFO] === Request start === [2025-08-22 08:30:16][352334102165559][2 ms][DEBUG] START check_scloud [2025-08-22 08:30:16][352334102165559][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:30:16][352334102165559][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19792 4994 24154996 172092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:30:16][352334102165559][317 ms][DEBUG] targetPkg: running [2025-08-22 08:30:16][352334102165559][317 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 08:30:16][352334102165559][317 ms][DEBUG] START check_boot_completed [2025-08-22 08:30:16][352334102165559][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:30:16][352334102165559][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:30:16][352334102165559][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:30:16][352334102165559][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:30:16][352334102165559][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 08:30:16][352334102165559][410 ms][DEBUG] START check_internet [2025-08-22 08:30:16][352334102165559][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:30:17][352334102165559][926 ms][DEBUG] SU: done in 516 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.966/200.966/200.966/0.000 ms\n [2025-08-22 08:30:17][352334102165559][926 ms][DEBUG] check_internet: online [2025-08-22 08:30:17][352334102165559][926 ms][DEBUG] END check_internet in 516 ms [2025-08-22 08:30:17][352334102165559][926 ms][DEBUG] rawBody.length=1160 [2025-08-22 08:30:17][352334102165559][926 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334102165559\",\"model\":\"SM-G973U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8M32MFVJL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4483\"}'\'' -e'"" [2025-08-22 08:30:17][352334102165559][926 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:30:17][352334102165559][926 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352334102165559\",\"model\":\"SM-G973U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8M32MFVJL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"SPR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4483\"}'\'' -e'"" [2025-08-22 08:30:22][352334102165559][6580 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ff1cd08-6070-4976-8cf3-5350623a721d","id":"QR_8ff1cd08-6070-4976-8cf3-5350623a721d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:30:23][352334102165559][6737 ms][DEBUG] proc_open done in 5810 ms; code=255; res.len=3152 [2025-08-22 08:30:23][352334102165559][6737 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-08-22 08:30:23][352334102165559][6737 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:31:16][359484882034740][0 ms][INFO] === Request start === [2025-08-22 08:31:16][359484882034740][1 ms][DEBUG] START check_scloud [2025-08-22 08:31:16][359484882034740][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:31:16][359484882034740][271 ms][DEBUG] SU: done in 269 ms; outu0_a118 19792 4994 24258520 184120 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:31:16][359484882034740][271 ms][DEBUG] targetPkg: running [2025-08-22 08:31:16][359484882034740][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-22 08:31:16][359484882034740][271 ms][DEBUG] START check_boot_completed [2025-08-22 08:31:16][359484882034740][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:31:16][359484882034740][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:31:16][359484882034740][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:31:16][359484882034740][396 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 08:31:16][359484882034740][396 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 08:31:16][359484882034740][396 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:31:16][359484882034740][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484882034740\",\"model\":\"SM-S721B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY23VST1V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8992\"}'\'' -e'"" [2025-08-22 08:31:16][359484882034740][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:31:16][359484882034740][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359484882034740\",\"model\":\"SM-S721B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY23VST1V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8992\"}'\'' -e'"" [2025-08-22 08:31:21][359484882034740][4738 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a27d336-d633-4835-a217-ae24eb890fa0","id":"QR_9a27d336-d633-4835-a217-ae24eb890fa0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:31:21][359484882034740][4894 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3152 [2025-08-22 08:31:21][359484882034740][4894 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-22 08:31:21][359484882034740][4894 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:35:44][357576782171084][1 ms][INFO] === Request start === [2025-08-22 08:35:44][357576782171084][2 ms][DEBUG] START check_scloud [2025-08-22 08:35:44][357576782171084][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:35:45][357576782171084][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 19792 4994 24384700 195080 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:35:45][357576782171084][309 ms][DEBUG] targetPkg: running [2025-08-22 08:35:45][357576782171084][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 08:35:45][357576782171084][309 ms][DEBUG] START check_boot_completed [2025-08-22 08:35:45][357576782171084][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:35:45][357576782171084][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 08:35:45][357576782171084][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:35:45][357576782171084][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:35:45][357576782171084][387 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 08:35:45][357576782171084][387 ms][DEBUG] rawBody.length=1160 [2025-08-22 08:35:45][357576782171084][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576782171084\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX9020BST\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2572\"}'\'' -e'"" [2025-08-22 08:35:45][357576782171084][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:35:45][357576782171084][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576782171084\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX9020BST\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2572\"}'\'' -e'"" [2025-08-22 08:35:51][357576782171084][6323 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2e36a52c-b328-43d5-8150-22c25c74ad60","id":"QR_2e36a52c-b328-43d5-8150-22c25c74ad60","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:35:51][357576782171084][6479 ms][DEBUG] proc_open done in 6091 ms; code=255; res.len=3152 [2025-08-22 08:35:51][357576782171084][6479 ms][DEBUG] END runCmdUntilRes#1 in 6091 ms [2025-08-22 08:35:51][357576782171084][6479 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:36:07][354505627814635][0 ms][INFO] === Request start === [2025-08-22 08:36:07][354505627814635][1 ms][DEBUG] START check_scloud [2025-08-22 08:36:07][354505627814635][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:36:07][354505627814635][270 ms][DEBUG] SU: done in 269 ms; outu0_a118 19792 4994 24519072 207108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:36:07][354505627814635][270 ms][DEBUG] targetPkg: running [2025-08-22 08:36:07][354505627814635][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-22 08:36:07][354505627814635][270 ms][DEBUG] START check_boot_completed [2025-08-22 08:36:07][354505627814635][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:36:07][354505627814635][317 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:36:07][354505627814635][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:36:07][354505627814635][379 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:36:07][354505627814635][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:36:07][354505627814635][379 ms][DEBUG] START check_internet [2025-08-22 08:36:07][354505627814635][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:36:08][354505627814635][910 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.131/202.131/202.131/0.000 ms\n [2025-08-22 08:36:08][354505627814635][910 ms][DEBUG] check_internet: online [2025-08-22 08:36:08][354505627814635][910 ms][DEBUG] END check_internet in 531 ms [2025-08-22 08:36:08][354505627814635][910 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:36:08][354505627814635][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505627814635\",\"model\":\"SM-G998B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CRB06VLGA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4549\"}'\'' -e'"" [2025-08-22 08:36:08][354505627814635][911 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:36:08][354505627814635][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354505627814635\",\"model\":\"SM-G998B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CRB06VLGA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4549\"}'\'' -e'"" [2025-08-22 08:36:12][354505627814635][5034 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c979b1a9-10fd-4d6d-8f74-e22f07d2b550","id":"QR_c979b1a9-10fd-4d6d-8f74-e22f07d2b550","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:36:12][354505627814635][5190 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 08:36:12][354505627814635][5190 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 08:36:12][354505627814635][5190 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:37:08][353243883105578][1 ms][INFO] === Request start === [2025-08-22 08:37:08][353243883105578][2 ms][DEBUG] START check_scloud [2025-08-22 08:37:08][353243883105578][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:37:08][353243883105578][274 ms][DEBUG] SU: done in 272 ms; outu0_a118 19792 4994 24674940 215564 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:37:08][353243883105578][274 ms][DEBUG] targetPkg: running [2025-08-22 08:37:08][353243883105578][274 ms][DEBUG] END check_scloud in 272 ms [2025-08-22 08:37:08][353243883105578][274 ms][DEBUG] START check_boot_completed [2025-08-22 08:37:08][353243883105578][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:37:08][353243883105578][321 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:37:08][353243883105578][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:37:08][353243883105578][398 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 08:37:08][353243883105578][398 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-22 08:37:08][353243883105578][398 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:37:08][353243883105578][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243883105578\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T815KN8A\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2914\"}'\'' -e'"" [2025-08-22 08:37:08][353243883105578][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:37:08][353243883105578][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243883105578\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T815KN8A\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2914\"}'\'' -e'"" [2025-08-22 08:37:12][353243883105578][4694 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8513bc52-1b1f-4d3f-89a0-a91870c5d370","id":"QR_8513bc52-1b1f-4d3f-89a0-a91870c5d370","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:37:12][353243883105578][4851 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3152 [2025-08-22 08:37:12][353243883105578][4851 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-22 08:37:12][353243883105578][4851 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:38:55][350070126107217][1 ms][INFO] === Request start === [2025-08-22 08:38:55][350070126107217][2 ms][DEBUG] START check_scloud [2025-08-22 08:38:55][350070126107217][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:38:55][350070126107217][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 19792 4994 24800992 227344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:38:55][350070126107217][305 ms][DEBUG] targetPkg: running [2025-08-22 08:38:55][350070126107217][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 08:38:55][350070126107217][305 ms][DEBUG] START check_boot_completed [2025-08-22 08:38:55][350070126107217][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:38:55][350070126107217][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 08:38:55][350070126107217][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:38:55][350070126107217][384 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 08:38:55][350070126107217][384 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 08:38:55][350070126107217][384 ms][DEBUG] START check_internet [2025-08-22 08:38:55][350070126107217][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:38:56][350070126107217][852 ms][DEBUG] SU: done in 467 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.286/201.286/201.286/0.000 ms\n [2025-08-22 08:38:56][350070126107217][852 ms][DEBUG] check_internet: online [2025-08-22 08:38:56][350070126107217][852 ms][DEBUG] END check_internet in 468 ms [2025-08-22 08:38:56][350070126107217][852 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:38:56][350070126107217][852 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070126107217\",\"model\":\"SM-S921B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CX20FKGLJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2116\"}'\'' -e'"" [2025-08-22 08:38:56][350070126107217][852 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:38:56][350070126107217][852 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350070126107217\",\"model\":\"SM-S921B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CX20FKGLJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2116\"}'\'' -e'"" [2025-08-22 08:39:00][350070126107217][5085 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6ee2d7cf-3fd5-4a9f-900b-b838e9b96028","id":"QR_6ee2d7cf-3fd5-4a9f-900b-b838e9b96028","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:39:00][350070126107217][5241 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3152 [2025-08-22 08:39:00][350070126107217][5241 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-22 08:39:00][350070126107217][5241 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:39:57][352288967868329][0 ms][INFO] === Request start === [2025-08-22 08:39:57][352288967868329][1 ms][DEBUG] START check_scloud [2025-08-22 08:39:57][352288967868329][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:39:57][352288967868329][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 19792 4994 24916932 238220 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:39:57][352288967868329][311 ms][DEBUG] targetPkg: running [2025-08-22 08:39:57][352288967868329][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 08:39:57][352288967868329][311 ms][DEBUG] START check_boot_completed [2025-08-22 08:39:57][352288967868329][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:39:57][352288967868329][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:39:57][352288967868329][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:39:57][352221805994973][0 ms][INFO] === Request start === [2025-08-22 08:39:57][352288967868329][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:39:57][352288967868329][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 08:39:57][352288967868329][404 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:39:57][352288967868329][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967868329\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB03F00H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7584\"}'\'' -e'"" [2025-08-22 08:39:57][352288967868329][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:39:57][352288967868329][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967868329\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB03F00H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7584\"}'\'' -e'"" [2025-08-22 08:40:01][352288967868329][4200 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 08:40:01][352288967868329][4200 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-22 08:40:01][352288967868329][4201 ms][WARN] Detected error: Process with pid 19792 either refused to load frida-agent, or terminated during injection [2025-08-22 08:40:01][352288967868329][4201 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 08:40:01][352288967868329][4342 ms][DEBUG] SU: done in 142 ms; out [2025-08-22 08:40:01][352288967868329][4343 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 08:40:01][352288967868329][4343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 08:40:01][352288967868329][4482 ms][DEBUG] SU: done in 139 ms; out [2025-08-22 08:40:01][352288967868329][4482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 08:40:01][352288967868329][4638 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 08:40:03][352288967868329][6653 ms][DEBUG] START check_boot_completed [2025-08-22 08:40:03][352288967868329][6653 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:40:03][352288967868329][6700 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:40:03][352288967868329][6700 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:40:03][352288967868329][6762 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:40:03][352288967868329][6763 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 08:40:06][352288967868329][9777 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 08:40:06][352288967868329][9777 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288967868329\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB03F00H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7584\"}'\'' -e'"" [2025-08-22 08:40:10][352288967868329][13604 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d56e8d25-4932-44ff-83e6-ad351cd72892","id":"QR_d56e8d25-4932-44ff-83e6-ad351cd72892","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:40:10][352288967868329][13761 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3152 [2025-08-22 08:40:10][352288967868329][13761 ms][DEBUG] END runCmdUntilRes#2 in 3983 ms [2025-08-22 08:40:10][352288967868329][13761 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:40:11][350026555051631][0 ms][INFO] === Request start === [2025-08-22 08:40:11][350026555051631][1 ms][DEBUG] START check_scloud [2025-08-22 08:40:11][350026555051631][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:40:11][350026555051631][234 ms][DEBUG] SU: done in 233 ms; outu0_a118 21403 4994 23725916 123060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:40:11][350026555051631][234 ms][DEBUG] targetPkg: running [2025-08-22 08:40:11][350026555051631][234 ms][DEBUG] END check_scloud in 234 ms [2025-08-22 08:40:11][350026555051631][234 ms][DEBUG] START check_boot_completed [2025-08-22 08:40:11][350026555051631][235 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:40:11][350026555051631][281 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:40:11][350026555051631][281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:40:11][350026555051631][328 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:40:11][350026555051631][328 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 08:40:11][350026555051631][328 ms][DEBUG] START check_internet [2025-08-22 08:40:11][350026555051631][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:40:11][350026555051631][562 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.288/138.288/138.288/0.000 ms\n [2025-08-22 08:40:11][350026555051631][562 ms][DEBUG] check_internet: online [2025-08-22 08:40:11][350026555051631][562 ms][DEBUG] END check_internet in 234 ms [2025-08-22 08:40:11][350026555051631][562 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:40:11][350026555051631][562 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026555051631\",\"model\":\"SM-A047F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W70VJMDL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2970\"}'\'' -e'"" [2025-08-22 08:40:11][350026555051631][562 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:40:11][350026555051631][562 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350026555051631\",\"model\":\"SM-A047F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W70VJMDL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2970\"}'\'' -e'"" [2025-08-22 08:40:14][352221805994973][0 ms][INFO] === Request start === [2025-08-22 08:40:14][352221805994973][1 ms][DEBUG] START check_scloud [2025-08-22 08:40:14][352221805994973][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:40:14][352221805994973][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 21403 4994 23901284 134304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:40:14][352221805994973][262 ms][DEBUG] targetPkg: running [2025-08-22 08:40:14][352221805994973][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-22 08:40:14][352221805994973][262 ms][DEBUG] START check_boot_completed [2025-08-22 08:40:14][352221805994973][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:40:14][352221805994973][309 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:40:14][352221805994973][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:40:14][352221805994973][358 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 08:40:14][352221805994973][358 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 08:40:14][352221805994973][358 ms][DEBUG] START check_internet [2025-08-22 08:40:14][352221805994973][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:40:14][352221805994973][590 ms][DEBUG] SU: done in 232 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=129 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 129.725/129.725/129.725/0.000 ms\n [2025-08-22 08:40:14][352221805994973][590 ms][DEBUG] check_internet: online [2025-08-22 08:40:14][352221805994973][590 ms][DEBUG] END check_internet in 232 ms [2025-08-22 08:40:14][352221805994973][590 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:40:14][352221805994973][590 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221805994973\",\"model\":\"SM-A336B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW11WYGVP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9680\"}'\'' -e'"" [2025-08-22 08:40:14][352221805994973][590 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:40:14][352221805994973][590 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352221805994973\",\"model\":\"SM-A336B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW11WYGVP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9680\"}'\'' -e'"" [2025-08-22 08:40:15][350026555051631][4389 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_456f1b77-273f-40b2-9d78-1999cb3bec8e","id":"QR_456f1b77-273f-40b2-9d78-1999cb3bec8e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:40:15][350026555051631][4546 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3152 [2025-08-22 08:40:15][350026555051631][4546 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-22 08:40:15][350026555051631][4546 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:40:18][352221805994973][4183 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8cc9af72-b9d2-406a-af1c-8da5e73eb284","id":"QR_8cc9af72-b9d2-406a-af1c-8da5e73eb284","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:40:18][352221805994973][4339 ms][DEBUG] proc_open done in 3749 ms; code=255; res.len=3152 [2025-08-22 08:40:18][352221805994973][4339 ms][DEBUG] END runCmdUntilRes#1 in 3749 ms [2025-08-22 08:40:18][352221805994973][4339 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:40:25][358104902919776][0 ms][INFO] === Request start === [2025-08-22 08:40:25][358104902919776][1 ms][DEBUG] START check_scloud [2025-08-22 08:40:25][358104902919776][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:40:26][358104902919776][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 21403 4994 24085816 147824 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:40:26][358104902919776][253 ms][DEBUG] targetPkg: running [2025-08-22 08:40:26][358104902919776][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-22 08:40:26][358104902919776][253 ms][DEBUG] START check_boot_completed [2025-08-22 08:40:26][358104902919776][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:40:26][358104902919776][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:40:26][358104902919776][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:40:26][358104902919776][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:40:26][358104902919776][346 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 08:40:26][358104902919776][346 ms][DEBUG] START check_internet [2025-08-22 08:40:26][358104902919776][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:40:26][358104902919776][846 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=363 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 363.241/363.241/363.241/0.000 ms\n [2025-08-22 08:40:26][358104902919776][846 ms][DEBUG] check_internet: online [2025-08-22 08:40:26][358104902919776][846 ms][DEBUG] END check_internet in 500 ms [2025-08-22 08:40:26][358104902919776][846 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:40:26][358104902919776][846 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902919776\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10XEFZN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2517\"}'\'' -e'"" [2025-08-22 08:40:26][358104902919776][846 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:40:26][358104902919776][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358104902919776\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10XEFZN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2517\"}'\'' -e'"" [2025-08-22 08:40:30][358104902919776][4533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6f595a90-2a60-4938-8312-bdd0dd18dd9e","id":"QR_6f595a90-2a60-4938-8312-bdd0dd18dd9e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:40:30][358104902919776][4689 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3152 [2025-08-22 08:40:30][358104902919776][4689 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-22 08:40:30][358104902919776][4689 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:42:21][350104180522894][1 ms][INFO] === Request start === [2025-08-22 08:42:21][350104180522894][2 ms][DEBUG] START check_scloud [2025-08-22 08:42:21][350104180522894][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:42:21][350104180522894][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 21403 4994 24076176 159640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:42:21][350104180522894][311 ms][DEBUG] targetPkg: running [2025-08-22 08:42:21][350104180522894][311 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 08:42:21][350104180522894][311 ms][DEBUG] START check_boot_completed [2025-08-22 08:42:21][350104180522894][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:42:21][350104180522894][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:42:21][350104180522894][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:42:21][350104180522894][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:42:21][350104180522894][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:42:21][350104180522894][420 ms][DEBUG] START check_internet [2025-08-22 08:42:21][350104180522894][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:42:22][350104180522894][733 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.187/216.187/216.187/0.000 ms\n [2025-08-22 08:42:22][350104180522894][733 ms][DEBUG] check_internet: online [2025-08-22 08:42:22][350104180522894][733 ms][DEBUG] END check_internet in 313 ms [2025-08-22 08:42:22][350104180522894][733 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:42:22][350104180522894][733 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350104180522894\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX23WGPCL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4225\"}'\'' -e'"" [2025-08-22 08:42:22][350104180522894][733 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:42:22][350104180522894][733 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350104180522894\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX23WGPCL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4225\"}'\'' -e'"" [2025-08-22 08:42:26][350104180522894][4825 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ddadf12a-a588-419e-8537-f42a9edfa9b1","id":"QR_ddadf12a-a588-419e-8537-f42a9edfa9b1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:42:26][350104180522894][4981 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 08:42:26][350104180522894][4981 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-22 08:42:26][350104180522894][4982 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:43:07][350824192548559][1 ms][INFO] === Request start === [2025-08-22 08:43:07][350824192548559][2 ms][DEBUG] START check_scloud [2025-08-22 08:43:07][350824192548559][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:43:07][350824192548559][300 ms][DEBUG] SU: done in 298 ms; outu0_a118 21403 4994 24212596 171364 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:43:07][350824192548559][300 ms][DEBUG] targetPkg: running [2025-08-22 08:43:07][350824192548559][300 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 08:43:07][350824192548559][300 ms][DEBUG] START check_boot_completed [2025-08-22 08:43:07][350824192548559][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:43:07][350824192548559][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:43:07][350824192548559][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:43:07][350824192548559][394 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 08:43:07][350824192548559][395 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 08:43:07][350824192548559][395 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:43:07][350824192548559][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192548559\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX826CFHL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7861\"}'\'' -e'"" [2025-08-22 08:43:07][350824192548559][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:43:07][350824192548559][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824192548559\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX826CFHL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7861\"}'\'' -e'"" [2025-08-22 08:43:11][350824192548559][4267 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66d2e2a9-70a6-45c4-9a26-db2609723ff7","id":"QR_66d2e2a9-70a6-45c4-9a26-db2609723ff7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:43:11][350824192548559][4424 ms][DEBUG] proc_open done in 4028 ms; code=255; res.len=3152 [2025-08-22 08:43:11][350824192548559][4424 ms][DEBUG] END runCmdUntilRes#1 in 4029 ms [2025-08-22 08:43:11][350824192548559][4424 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:44:32][351843260142987][1 ms][INFO] === Request start === [2025-08-22 08:44:32][351843260142987][1 ms][DEBUG] START check_scloud [2025-08-22 08:44:32][351843260142987][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:44:33][351843260142987][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 21403 4994 24359256 181964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:44:33][351843260142987][302 ms][DEBUG] targetPkg: running [2025-08-22 08:44:33][351843260142987][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 08:44:33][351843260142987][302 ms][DEBUG] START check_boot_completed [2025-08-22 08:44:33][351843260142987][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:44:33][351843260142987][349 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:44:33][351843260142987][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:44:33][351843260142987][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:44:33][351843260142987][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:44:33][351843260142987][411 ms][DEBUG] START check_internet [2025-08-22 08:44:33][351843260142987][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:44:33][351843260142987][911 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.826/202.826/202.826/0.000 ms\n [2025-08-22 08:44:33][351843260142987][911 ms][DEBUG] check_internet: online [2025-08-22 08:44:33][351843260142987][911 ms][DEBUG] END check_internet in 500 ms [2025-08-22 08:44:33][351843260142987][911 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:44:33][351843260142987][911 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351843260142987\",\"model\":\"SM-F936B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT709AH2R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SMP\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4225\"}'\'' -e'"" [2025-08-22 08:44:33][351843260142987][911 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:44:33][351843260142987][911 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351843260142987\",\"model\":\"SM-F936B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT709AH2R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SMP\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4225\"}'\'' -e'"" [2025-08-22 08:44:38][351843260142987][5347 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13400cf4-e925-4f91-86f2-c840bcef6642","id":"QR_13400cf4-e925-4f91-86f2-c840bcef6642","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:44:38][351843260142987][5503 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3152 [2025-08-22 08:44:38][351843260142987][5503 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-22 08:44:38][351843260142987][5504 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:47:06][351832194954567][1 ms][INFO] === Request start === [2025-08-22 08:47:06][351832194954567][2 ms][DEBUG] START check_scloud [2025-08-22 08:47:06][351832194954567][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:47:06][351832194954567][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 21403 4994 24517948 194484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:47:06][351832194954567][317 ms][DEBUG] targetPkg: running [2025-08-22 08:47:06][351832194954567][317 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 08:47:06][351832194954567][317 ms][DEBUG] START check_boot_completed [2025-08-22 08:47:06][351832194954567][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:47:06][351832194954567][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 08:47:06][351832194954567][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:47:06][351832194954567][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:47:06][351832194954567][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 08:47:06][351832194954567][395 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:47:06][351832194954567][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351832194954567\",\"model\":\"SM-A217F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58NB33X83E\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4519\"}'\'' -e'"" [2025-08-22 08:47:06][351832194954567][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:47:06][351832194954567][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351832194954567\",\"model\":\"SM-A217F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58NB33X83E\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4519\"}'\'' -e'"" [2025-08-22 08:47:11][351832194954567][4675 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_268471d5-f7d4-4817-952e-5ba60663b9b0","id":"QR_268471d5-f7d4-4817-952e-5ba60663b9b0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:47:11][351832194954567][4831 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3152 [2025-08-22 08:47:11][351832194954567][4831 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-22 08:47:11][351832194954567][4831 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:49:07][351250092260559][1 ms][INFO] === Request start === [2025-08-22 08:49:07][351250092260559][2 ms][DEBUG] START check_scloud [2025-08-22 08:49:07][351250092260559][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:49:08][351250092260559][328 ms][DEBUG] SU: done in 326 ms; outu0_a118 21403 4994 24676768 205328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:49:08][351250092260559][328 ms][DEBUG] targetPkg: running [2025-08-22 08:49:08][351250092260559][328 ms][DEBUG] END check_scloud in 326 ms [2025-08-22 08:49:08][351250092260559][328 ms][DEBUG] START check_boot_completed [2025-08-22 08:49:08][351250092260559][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:49:08][351250092260559][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:49:08][351250092260559][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:49:08][351250092260559][437 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:49:08][351250092260559][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:49:08][351250092260559][437 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:49:08][351250092260559][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250092260559\",\"model\":\"SM-A156E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX52GRL6B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6138\"}'\'' -e'"" [2025-08-22 08:49:08][351250092260559][437 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:49:08][351250092260559][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351250092260559\",\"model\":\"SM-A156E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX52GRL6B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6138\"}'\'' -e'"" [2025-08-22 08:49:12][351250092260559][4327 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_66be1752-fba1-41f1-8576-ad48490f3be0","id":"QR_66be1752-fba1-41f1-8576-ad48490f3be0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:49:12][351250092260559][4483 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3152 [2025-08-22 08:49:12][351250092260559][4483 ms][DEBUG] END runCmdUntilRes#1 in 4046 ms [2025-08-22 08:49:12][351250092260559][4483 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:53:06][351199554760400][1 ms][INFO] === Request start === [2025-08-22 08:53:06][351199554760400][2 ms][DEBUG] START check_scloud [2025-08-22 08:53:06][351199554760400][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:53:06][351199554760400][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 21403 4994 24799748 217460 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:53:06][351199554760400][273 ms][DEBUG] targetPkg: running [2025-08-22 08:53:06][351199554760400][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-22 08:53:06][351199554760400][273 ms][DEBUG] START check_boot_completed [2025-08-22 08:53:06][351199554760400][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:53:06][351199554760400][305 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 08:53:06][351199554760400][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:53:06][351199554760400][352 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 08:53:06][351199554760400][352 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 08:53:06][351199554760400][352 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:53:06][351199554760400][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554760400\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X907K52K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6594\"}'\'' -e'"" [2025-08-22 08:53:06][351199554760400][353 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:53:06][351199554760400][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554760400\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X907K52K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6594\"}'\'' -e'"" [2025-08-22 08:53:10][351199554760400][4476 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_296805e2-ec20-4249-a5d2-f9486e789935","id":"QR_296805e2-ec20-4249-a5d2-f9486e789935","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:53:10][351199554760400][4632 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3152 [2025-08-22 08:53:10][351199554760400][4632 ms][DEBUG] END runCmdUntilRes#1 in 4279 ms [2025-08-22 08:53:10][351199554760400][4632 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:54:33][357452102962398][0 ms][INFO] === Request start === [2025-08-22 08:54:33][357452102962398][1 ms][DEBUG] START check_scloud [2025-08-22 08:54:33][357452102962398][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:54:33][357452102962398][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 21403 4994 24956648 225792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:54:33][357452102962398][319 ms][DEBUG] targetPkg: running [2025-08-22 08:54:33][357452102962398][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-22 08:54:33][357452102962398][319 ms][DEBUG] START check_boot_completed [2025-08-22 08:54:33][357452102962398][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:54:33][357452102962398][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:54:33][357452102962398][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:54:33][357452102962398][415 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 08:54:33][357452102962398][415 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-22 08:54:33][357452102962398][415 ms][DEBUG] START check_internet [2025-08-22 08:54:33][357452102962398][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 08:54:33][357452102962398][912 ms][DEBUG] SU: done in 497 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.295/197.295/197.295/0.000 ms\n [2025-08-22 08:54:33][357452102962398][912 ms][DEBUG] check_internet: online [2025-08-22 08:54:33][357452102962398][913 ms][DEBUG] END check_internet in 498 ms [2025-08-22 08:54:33][357452102962398][913 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:54:33][357452102962398][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357452102962398\",\"model\":\"SM-N970F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58M845GLBW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"GLB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8008\"}'\'' -e'"" [2025-08-22 08:54:33][357452102962398][913 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:54:33][357452102962398][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357452102962398\",\"model\":\"SM-N970F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58M845GLBW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"GLB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8008\"}'\'' -e'"" [2025-08-22 08:54:38][357452102962398][5021 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_99face6f-d17b-4800-965a-6b3aaba31c00","id":"QR_99face6f-d17b-4800-965a-6b3aaba31c00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:54:38][357452102962398][5177 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3152 [2025-08-22 08:54:38][357452102962398][5177 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-22 08:54:38][357452102962398][5177 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:55:05][355060833630952][0 ms][INFO] === Request start === [2025-08-22 08:55:05][355060833630952][1 ms][DEBUG] START check_scloud [2025-08-22 08:55:05][355060833630952][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:55:05][355060833630952][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 21403 4994 25119696 226236 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:55:05][355060833630952][308 ms][DEBUG] targetPkg: running [2025-08-22 08:55:05][355060833630952][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 08:55:05][355060833630952][308 ms][DEBUG] START check_boot_completed [2025-08-22 08:55:05][355060833630952][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:55:05][355060833630952][355 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:55:05][355060833630952][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:55:05][355060833630952][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:55:05][355060833630952][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:55:05][355060833630952][418 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:55:05][355060833630952][418 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833630952\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4712\"}'\'' -e'"" [2025-08-22 08:55:05][355060833630952][418 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:55:05][355060833630952][418 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833630952\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4712\"}'\'' -e'"" [2025-08-22 08:55:09][355060833630952][4104 ms][DEBUG] proc_open done in 3686 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 08:55:09][355060833630952][4104 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-22 08:55:09][355060833630952][4104 ms][WARN] Detected error: Process with pid 21403 either refused to load frida-agent, or terminated during injection [2025-08-22 08:55:09][355060833630952][4104 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 08:55:09][355060833630952][4245 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 08:55:09][355060833630952][4245 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 08:55:09][355060833630952][4245 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 08:55:09][355060833630952][4370 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 08:55:09][355060833630952][4370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 08:55:09][355060833630952][4588 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 08:55:11][355060833630952][6603 ms][DEBUG] START check_boot_completed [2025-08-22 08:55:11][355060833630952][6604 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:55:11][355060833630952][6650 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:55:11][355060833630952][6650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:55:11][355060833630952][6697 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:55:11][355060833630952][6697 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 08:55:12][358558823566026][1 ms][INFO] === Request start === [2025-08-22 08:55:14][355060833630952][9712 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 08:55:14][355060833630952][9712 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833630952\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4712\"}'\'' -e'"" [2025-08-22 08:55:18][355060833630952][13086 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 08:55:18][355060833630952][13242 ms][DEBUG] proc_open done in 3530 ms; code=255; res.len=115 [2025-08-22 08:55:18][355060833630952][13243 ms][DEBUG] END runCmdUntilRes#2 in 3530 ms [2025-08-22 08:55:18][355060833630952][13243 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 08:55:18][358558823566026][6082 ms][DEBUG] START check_scloud [2025-08-22 08:55:18][358558823566026][6082 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:55:18][][1 ms][INFO] === Request start === [2025-08-22 08:55:18][358558823566026][6332 ms][DEBUG] SU: done in 250 ms; outu0_a118 23833 4994 23687320 123288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:55:18][358558823566026][6332 ms][DEBUG] targetPkg: running [2025-08-22 08:55:18][358558823566026][6332 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 08:55:18][358558823566026][6332 ms][DEBUG] START check_boot_completed [2025-08-22 08:55:18][358558823566026][6332 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:55:19][358558823566026][6379 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:55:19][358558823566026][6379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:55:19][358558823566026][6441 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 08:55:19][358558823566026][6442 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:55:19][358558823566026][6442 ms][DEBUG] rawBody.length=1161 [2025-08-22 08:55:19][358558823566026][6442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558823566026\",\"model\":\"SM-G780F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N92XDKXD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2027\"}'\'' -e'"" [2025-08-22 08:55:19][358558823566026][6442 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:55:19][358558823566026][6442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358558823566026\",\"model\":\"SM-G780F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N92XDKXD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2027\"}'\'' -e'"" [2025-08-22 08:55:22][358558823566026][10300 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fdb41fd5-96eb-4cf4-9a19-81c5014feafc","id":"QR_fdb41fd5-96eb-4cf4-9a19-81c5014feafc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:55:23][358558823566026][10456 ms][DEBUG] proc_open done in 4014 ms; code=255; res.len=3152 [2025-08-22 08:55:23][358558823566026][10456 ms][DEBUG] END runCmdUntilRes#1 in 4014 ms [2025-08-22 08:55:23][358558823566026][10456 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 08:55:23][][5071 ms][DEBUG] START check_scloud [2025-08-22 08:55:23][][5071 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:55:24][][5321 ms][DEBUG] SU: done in 250 ms; outu0_a118 23833 4994 23830976 134740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:55:24][][5321 ms][DEBUG] targetPkg: running [2025-08-22 08:55:24][][5321 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 08:55:24][][5321 ms][DEBUG] START check_boot_completed [2025-08-22 08:55:24][][5321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:55:24][][5353 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 08:55:24][][5353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:55:24][][5400 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:55:24][][5400 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 08:55:24][][5400 ms][DEBUG] rawBody.length=1131 [2025-08-22 08:55:24][][5400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7861\"}'\'' -e'"" [2025-08-22 08:55:24][][5400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:55:24][][5400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7861\"}'\'' -e'"" [2025-08-22 08:55:27][][8742 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 08:55:27][][8899 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=107 [2025-08-22 08:55:27][][8899 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-22 08:55:27][][8899 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 08:55:28][][0 ms][INFO] === Request start === [2025-08-22 08:55:28][][1 ms][DEBUG] START check_scloud [2025-08-22 08:55:28][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:55:28][][241 ms][DEBUG] SU: done in 240 ms; outu0_a118 23833 4994 24033492 147960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:55:28][][241 ms][DEBUG] targetPkg: running [2025-08-22 08:55:28][][241 ms][DEBUG] END check_scloud in 240 ms [2025-08-22 08:55:28][][241 ms][DEBUG] START check_boot_completed [2025-08-22 08:55:28][][241 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:55:28][][287 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 08:55:28][][287 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:55:28][][334 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 08:55:28][][334 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 08:55:28][][334 ms][DEBUG] rawBody.length=1131 [2025-08-22 08:55:28][][334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5960\"}'\'' -e'"" [2025-08-22 08:55:28][][334 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:55:28][][334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5960\"}'\'' -e'"" [2025-08-22 08:55:32][][4083 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 08:55:32][][4239 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=107 [2025-08-22 08:55:32][][4240 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-22 08:55:32][][4240 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 08:55:34][355060833630952][0 ms][INFO] === Request start === [2025-08-22 08:55:34][355060833630952][1 ms][DEBUG] START check_scloud [2025-08-22 08:55:34][355060833630952][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 08:55:34][355060833630952][235 ms][DEBUG] SU: done in 234 ms; outu0_a118 23833 4994 24145272 159132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 08:55:34][355060833630952][235 ms][DEBUG] targetPkg: running [2025-08-22 08:55:34][355060833630952][235 ms][DEBUG] END check_scloud in 234 ms [2025-08-22 08:55:34][355060833630952][235 ms][DEBUG] START check_boot_completed [2025-08-22 08:55:34][355060833630952][235 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 08:55:34][355060833630952][282 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 08:55:34][355060833630952][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 08:55:35][355060833630952][344 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 08:55:35][355060833630952][344 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 08:55:35][355060833630952][344 ms][DEBUG] rawBody.length=1160 [2025-08-22 08:55:35][355060833630952][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833630952\",\"model\":\"SM-A546B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5588\"}'\'' -e'"" [2025-08-22 08:55:35][355060833630952][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 08:55:35][355060833630952][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833630952\",\"model\":\"SM-A546B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5588\"}'\'' -e'"" [2025-08-22 08:55:40][355060833630952][6186 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a26806b7-a187-4230-934b-dc43feb6246d","id":"QR_a26806b7-a187-4230-934b-dc43feb6246d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 08:55:41][355060833630952][6343 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3152 [2025-08-22 08:55:41][355060833630952][6343 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-08-22 08:55:41][355060833630952][6343 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:01:37][354106243207161][1 ms][INFO] === Request start === [2025-08-22 09:01:37][354106243207161][2 ms][DEBUG] START check_scloud [2025-08-22 09:01:37][354106243207161][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:01:37][354106243207161][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 23833 4994 24128500 171392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:01:37][354106243207161][307 ms][DEBUG] targetPkg: running [2025-08-22 09:01:37][354106243207161][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 09:01:37][354106243207161][307 ms][DEBUG] START check_boot_completed [2025-08-22 09:01:37][354106243207161][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:01:37][354106243207161][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 09:01:37][354106243207161][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:01:38][354106243207161][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:01:38][354106243207161][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 09:01:38][354106243207161][401 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:01:38][354106243207161][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106243207161\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW328VDEL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8358\"}'\'' -e'"" [2025-08-22 09:01:38][354106243207161][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:01:38][354106243207161][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106243207161\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW328VDEL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8358\"}'\'' -e'"" [2025-08-22 09:01:42][354106243207161][4493 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f93797f3-8697-4382-bfc2-97bd60469194","id":"QR_f93797f3-8697-4382-bfc2-97bd60469194","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:01:42][354106243207161][4650 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3152 [2025-08-22 09:01:42][354106243207161][4650 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-22 09:01:42][354106243207161][4650 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:03:05][351828112893317][1 ms][INFO] === Request start === [2025-08-22 09:03:05][351828112893317][2 ms][DEBUG] START check_scloud [2025-08-22 09:03:05][351828112893317][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:03:06][351828112893317][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 23833 4994 24281304 183468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:03:06][351828112893317][296 ms][DEBUG] targetPkg: running [2025-08-22 09:03:06][351828112893317][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-22 09:03:06][351828112893317][296 ms][DEBUG] START check_boot_completed [2025-08-22 09:03:06][351828112893317][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:03:06][351828112893317][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 09:03:06][351828112893317][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:03:06][351828112893317][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:03:06][351828112893317][389 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 09:03:06][351828112893317][389 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:03:06][351828112893317][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112893317\",\"model\":\"SM-G988B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CN215QAZK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3200\"}'\'' -e'"" [2025-08-22 09:03:06][351828112893317][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:03:06][351828112893317][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828112893317\",\"model\":\"SM-G988B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CN215QAZK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3200\"}'\'' -e'"" [2025-08-22 09:03:10][351828112893317][4467 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_668ea42e-6e80-4ded-894f-a45254cc50a2","id":"QR_668ea42e-6e80-4ded-894f-a45254cc50a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:03:10][351828112893317][4623 ms][DEBUG] proc_open done in 4233 ms; code=255; res.len=3152 [2025-08-22 09:03:10][351828112893317][4623 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-22 09:03:10][351828112893317][4623 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:07:15][350601361351704][1 ms][INFO] === Request start === [2025-08-22 09:07:15][350601361351704][2 ms][DEBUG] START check_scloud [2025-08-22 09:07:15][350601361351704][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:07:15][350601361351704][256 ms][DEBUG] SU: done in 254 ms; outu0_a118 23833 4994 24386876 194476 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:07:15][350601361351704][256 ms][DEBUG] targetPkg: running [2025-08-22 09:07:15][350601361351704][256 ms][DEBUG] END check_scloud in 254 ms [2025-08-22 09:07:15][350601361351704][256 ms][DEBUG] START check_boot_completed [2025-08-22 09:07:15][350601361351704][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:07:15][350601361351704][303 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:07:15][350601361351704][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:07:15][350601361351704][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:07:15][350601361351704][350 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 09:07:15][350601361351704][350 ms][DEBUG] rawBody.length=1160 [2025-08-22 09:07:15][350601361351704][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350601361351704\",\"model\":\"SM-A266M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY54XAV1B\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6965\"}'\'' -e'"" [2025-08-22 09:07:15][350601361351704][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:07:15][350601361351704][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350601361351704\",\"model\":\"SM-A266M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY54XAV1B\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6965\"}'\'' -e'"" [2025-08-22 09:07:20][350601361351704][5879 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51acdef9-33c2-4fea-8a72-2f51a9586af4","id":"QR_51acdef9-33c2-4fea-8a72-2f51a9586af4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:07:21][350601361351704][6035 ms][DEBUG] proc_open done in 5685 ms; code=255; res.len=3152 [2025-08-22 09:07:21][350601361351704][6035 ms][DEBUG] END runCmdUntilRes#1 in 5685 ms [2025-08-22 09:07:21][350601361351704][6036 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:07:29][352635231760080][0 ms][INFO] === Request start === [2025-08-22 09:07:29][352635231760080][1 ms][DEBUG] START check_scloud [2025-08-22 09:07:29][352635231760080][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:07:29][352635231760080][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 23833 4994 24566212 206108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:07:29][352635231760080][258 ms][DEBUG] targetPkg: running [2025-08-22 09:07:29][352635231760080][258 ms][DEBUG] END check_scloud in 257 ms [2025-08-22 09:07:29][352635231760080][258 ms][DEBUG] START check_boot_completed [2025-08-22 09:07:29][352635231760080][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:07:29][352635231760080][304 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 09:07:29][352635231760080][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:07:29][352635231760080][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:07:29][352635231760080][351 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 09:07:29][352635231760080][351 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:07:29][352635231760080][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352635231760080\",\"model\":\"SM-A516J\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CR70DWWAV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KDI\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7835\"}'\'' -e'"" [2025-08-22 09:07:29][352635231760080][352 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:07:29][352635231760080][352 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352635231760080\",\"model\":\"SM-A516J\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CR70DWWAV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KDI\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7835\"}'\'' -e'"" [2025-08-22 09:07:34][352635231760080][4741 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5cb1c5ff-ce77-4d37-8397-4a2c5bea5838","id":"QR_5cb1c5ff-ce77-4d37-8397-4a2c5bea5838","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:07:34][352635231760080][4897 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3152 [2025-08-22 09:07:34][352635231760080][4897 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-22 09:07:34][352635231760080][4897 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:08:15][353055520661668][0 ms][INFO] === Request start === [2025-08-22 09:08:15][353055520661668][1 ms][DEBUG] START check_scloud [2025-08-22 09:08:15][353055520661668][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:08:15][353055520661668][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 23833 4994 24653252 217304 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:08:15][353055520661668][291 ms][DEBUG] targetPkg: running [2025-08-22 09:08:15][353055520661668][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-22 09:08:15][353055520661668][291 ms][DEBUG] START check_boot_completed [2025-08-22 09:08:15][353055520661668][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:08:15][353055520661668][337 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 09:08:15][353055520661668][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:08:15][353055520661668][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:08:15][353055520661668][384 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 09:08:15][353055520661668][384 ms][DEBUG] START check_internet [2025-08-22 09:08:15][353055520661668][384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:08:16][353055520661668][821 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.833/201.833/201.833/0.000 ms\n [2025-08-22 09:08:16][353055520661668][821 ms][DEBUG] check_internet: online [2025-08-22 09:08:16][353055520661668][821 ms][DEBUG] END check_internet in 437 ms [2025-08-22 09:08:16][353055520661668][821 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:08:16][353055520661668][821 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353055520661668\",\"model\":\"SM-S906B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT401BYMN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8806\"}'\'' -e'"" [2025-08-22 09:08:16][353055520661668][821 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:08:16][353055520661668][821 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353055520661668\",\"model\":\"SM-S906B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT401BYMN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8806\"}'\'' -e'"" [2025-08-22 09:08:20][353055520661668][4867 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_540aefbf-b647-420d-b8d2-a444ccf33e6d","id":"QR_540aefbf-b647-420d-b8d2-a444ccf33e6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:08:20][353055520661668][5023 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3152 [2025-08-22 09:08:20][353055520661668][5023 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-22 09:08:20][353055520661668][5023 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:15:08][353818874129529][1 ms][INFO] === Request start === [2025-08-22 09:15:08][353818874129529][2 ms][DEBUG] START check_scloud [2025-08-22 09:15:08][353818874129529][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:15:09][353818874129529][251 ms][DEBUG] SU: done in 249 ms; outu0_a118 23833 4994 24787476 228016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:15:09][353818874129529][251 ms][DEBUG] targetPkg: running [2025-08-22 09:15:09][353818874129529][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 09:15:09][353818874129529][251 ms][DEBUG] START check_boot_completed [2025-08-22 09:15:09][353818874129529][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:15:09][353818874129529][282 ms][DEBUG] ADB: done in 30 ms; out [2025-08-22 09:15:09][353818874129529][282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:15:09][353818874129529][329 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:15:09][353818874129529][329 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 09:15:09][353818874129529][329 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:15:09][353818874129529][329 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874129529\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXA0DP32D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4158\"}'\'' -e'"" [2025-08-22 09:15:09][353818874129529][329 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:15:09][353818874129529][329 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818874129529\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXA0DP32D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4158\"}'\'' -e'"" [2025-08-22 09:15:13][353818874129529][4531 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f37efa7c-d678-49f4-bc6d-a27555ca1576","id":"QR_f37efa7c-d678-49f4-bc6d-a27555ca1576","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:15:13][353818874129529][4687 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3152 [2025-08-22 09:15:13][353818874129529][4687 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-22 09:15:13][353818874129529][4687 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:17:24][352132620037130][1 ms][INFO] === Request start === [2025-08-22 09:17:24][352132620037130][2 ms][DEBUG] START check_scloud [2025-08-22 09:17:24][352132620037130][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:17:24][352132620037130][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 23833 4994 24950532 239512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:17:24][352132620037130][312 ms][DEBUG] targetPkg: running [2025-08-22 09:17:24][352132620037130][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 09:17:24][352132620037130][312 ms][DEBUG] START check_boot_completed [2025-08-22 09:17:24][352132620037130][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:17:25][352132620037130][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:17:25][352132620037130][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:17:25][352132620037130][437 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 09:17:25][352132620037130][438 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 09:17:25][352132620037130][438 ms][DEBUG] rawBody.length=1159 [2025-08-22 09:17:25][352132620037130][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132620037130\",\"model\":\"SM-T390\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R106440P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5353\"}'\'' -e'"" [2025-08-22 09:17:25][352132620037130][438 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:17:25][352132620037130][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132620037130\",\"model\":\"SM-T390\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R106440P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5353\"}'\'' -e'"" [2025-08-22 09:17:28][352132620037130][4155 ms][DEBUG] proc_open done in 3717 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 09:17:28][352132620037130][4155 ms][DEBUG] END runCmdUntilRes#1 in 3717 ms [2025-08-22 09:17:28][352132620037130][4155 ms][WARN] Detected error: Process with pid 23833 either refused to load frida-agent, or terminated during injection [2025-08-22 09:17:28][352132620037130][4155 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 09:17:28][352132620037130][4296 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 09:17:28][352132620037130][4296 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 09:17:28][352132620037130][4296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 09:17:29][352132620037130][4421 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 09:17:29][352132620037130][4421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 09:17:29][352132620037130][4577 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 09:17:31][352132620037130][6592 ms][DEBUG] START check_boot_completed [2025-08-22 09:17:31][352132620037130][6592 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:17:31][352132620037130][6639 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:17:31][352132620037130][6639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:17:31][352132620037130][6701 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:17:31][352132620037130][6701 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 09:17:34][352132620037130][9716 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 09:17:34][352132620037130][9716 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352132620037130\",\"model\":\"SM-T390\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R106440P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5353\"}'\'' -e'"" [2025-08-22 09:17:39][352132620037130][14996 ms][DEBUG] frida res:res:{"code":4002401,"message":"KDMS_SYNC_UPLOAD_FAILED","data":"NON_SAMSUNG_DEVICE"}\r\n [2025-08-22 09:17:39][352132620037130][15152 ms][DEBUG] proc_open done in 5436 ms; code=255; res.len=80 [2025-08-22 09:17:39][352132620037130][15152 ms][DEBUG] END runCmdUntilRes#2 in 5436 ms [2025-08-22 09:17:39][352132620037130][15153 ms][INFO] SUCCESS response from frida (len=80) [2025-08-22 09:17:40][350545461564635][0 ms][INFO] === Request start === [2025-08-22 09:17:40][350545461564635][1 ms][DEBUG] START check_scloud [2025-08-22 09:17:40][350545461564635][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:17:40][350545461564635][236 ms][DEBUG] SU: done in 235 ms; outu0_a118 25951 4994 23723608 123764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:17:40][350545461564635][236 ms][DEBUG] targetPkg: running [2025-08-22 09:17:40][350545461564635][236 ms][DEBUG] END check_scloud in 235 ms [2025-08-22 09:17:40][350545461564635][236 ms][DEBUG] START check_boot_completed [2025-08-22 09:17:40][350545461564635][236 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:17:40][350545461564635][267 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 09:17:40][350545461564635][267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:17:40][350545461564635][314 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:17:40][350545461564635][314 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 09:17:40][350545461564635][314 ms][DEBUG] rawBody.length=1160 [2025-08-22 09:17:40][350545461564635][314 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461564635\",\"model\":\"SM-T390\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52R106440P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1763\"}'\'' -e'"" [2025-08-22 09:17:40][350545461564635][314 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:17:40][350545461564635][314 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545461564635\",\"model\":\"SM-T390\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52R106440P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1763\"}'\'' -e'"" [2025-08-22 09:17:44][350545461564635][4313 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b65a0158-bc6d-4b7c-a5b1-b4d60e4b5556","id":"QR_b65a0158-bc6d-4b7c-a5b1-b4d60e4b5556","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:17:45][350545461564635][4469 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3152 [2025-08-22 09:17:45][350545461564635][4469 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-22 09:17:45][350545461564635][4469 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:18:06][353497472523746][0 ms][INFO] === Request start === [2025-08-22 09:18:06][353497472523746][1 ms][DEBUG] START check_scloud [2025-08-22 09:18:06][353497472523746][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:18:06][353497472523746][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 25951 4994 23776824 137328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:18:06][353497472523746][316 ms][DEBUG] targetPkg: running [2025-08-22 09:18:06][353497472523746][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 09:18:06][353497472523746][316 ms][DEBUG] START check_boot_completed [2025-08-22 09:18:06][353497472523746][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:18:06][353497472523746][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:18:06][353497472523746][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:18:06][353497472523746][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:18:06][353497472523746][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 09:18:06][353497472523746][425 ms][DEBUG] START check_internet [2025-08-22 09:18:06][353497472523746][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:18:07][353497472523746][784 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=122 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 122.178/122.178/122.178/0.000 ms\n [2025-08-22 09:18:07][353497472523746][784 ms][DEBUG] check_internet: online [2025-08-22 09:18:07][353497472523746][784 ms][DEBUG] END check_internet in 359 ms [2025-08-22 09:18:07][353497472523746][784 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:18:07][353497472523746][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497472523746\",\"model\":\"SM-S921B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX503Q3NV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7224\"}'\'' -e'"" [2025-08-22 09:18:07][353497472523746][784 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:18:07][353497472523746][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497472523746\",\"model\":\"SM-S921B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX503Q3NV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7224\"}'\'' -e'"" [2025-08-22 09:18:11][353497472523746][4768 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_819bc186-f7ad-4a01-b5fc-64b7733b44c3","id":"QR_819bc186-f7ad-4a01-b5fc-64b7733b44c3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:18:11][353497472523746][4924 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3152 [2025-08-22 09:18:11][353497472523746][4924 ms][DEBUG] END runCmdUntilRes#1 in 4140 ms [2025-08-22 09:18:11][353497472523746][4924 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:19:54][351505860355265][1 ms][INFO] === Request start === [2025-08-22 09:19:54][351505860355265][2 ms][DEBUG] START check_scloud [2025-08-22 09:19:54][351505860355265][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:19:54][351505860355265][250 ms][DEBUG] SU: done in 248 ms; outu0_a118 25951 4994 23881296 149116 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:19:54][351505860355265][250 ms][DEBUG] targetPkg: running [2025-08-22 09:19:54][351505860355265][250 ms][DEBUG] END check_scloud in 248 ms [2025-08-22 09:19:54][351505860355265][250 ms][DEBUG] START check_boot_completed [2025-08-22 09:19:54][351505860355265][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:19:54][351505860355265][297 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:19:54][351505860355265][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:19:54][351505860355265][375 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 09:19:54][351505860355265][375 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 09:19:54][351505860355265][375 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:19:54][351505860355265][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351505860355265\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8X4023YML\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9152\"}'\'' -e'"" [2025-08-22 09:19:54][351505860355265][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:19:54][351505860355265][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351505860355265\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8X4023YML\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9152\"}'\'' -e'"" [2025-08-22 09:19:59][351505860355265][4717 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_602b6bc9-22fc-4413-b8e2-abf6524188a9","id":"QR_602b6bc9-22fc-4413-b8e2-abf6524188a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:19:59][351505860355265][4874 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3152 [2025-08-22 09:19:59][351505860355265][4874 ms][DEBUG] END runCmdUntilRes#1 in 4498 ms [2025-08-22 09:19:59][351505860355265][4874 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:20:12][353055521214475][0 ms][INFO] === Request start === [2025-08-22 09:20:12][353055521214475][1 ms][DEBUG] START check_scloud [2025-08-22 09:20:12][353055521214475][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:20:12][353055521214475][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 25951 4994 24021784 160020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:20:12][353055521214475][312 ms][DEBUG] targetPkg: running [2025-08-22 09:20:12][353055521214475][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 09:20:12][353055521214475][312 ms][DEBUG] START check_boot_completed [2025-08-22 09:20:12][353055521214475][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:20:12][353055521214475][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:20:12][353055521214475][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:20:12][353055521214475][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:20:12][353055521214475][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 09:20:12][353055521214475][421 ms][DEBUG] START check_internet [2025-08-22 09:20:12][353055521214475][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:20:13][353055521214475][921 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.667/200.667/200.667/0.000 ms\n [2025-08-22 09:20:13][353055521214475][921 ms][DEBUG] check_internet: online [2025-08-22 09:20:13][353055521214475][921 ms][DEBUG] END check_internet in 500 ms [2025-08-22 09:20:13][353055521214475][921 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:20:13][353055521214475][921 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353055521214475\",\"model\":\"SM-S906B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT500DKFN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1901\"}'\'' -e'"" [2025-08-22 09:20:13][353055521214475][921 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:20:13][353055521214475][921 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353055521214475\",\"model\":\"SM-S906B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT500DKFN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1901\"}'\'' -e'"" [2025-08-22 09:20:17][353055521214475][4670 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9cfa64d3-ce88-4fdc-954f-f44164a44c79","id":"QR_9cfa64d3-ce88-4fdc-954f-f44164a44c79","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:20:17][353055521214475][4826 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3152 [2025-08-22 09:20:17][353055521214475][4826 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-22 09:20:17][353055521214475][4826 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:24:57][352539599456549][1 ms][INFO] === Request start === [2025-08-22 09:24:57][352539599456549][2 ms][DEBUG] START check_scloud [2025-08-22 09:24:57][352539599456549][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:24:57][352539599456549][265 ms][DEBUG] SU: done in 263 ms; outu0_a118 25951 4994 24142836 171720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:24:57][352539599456549][265 ms][DEBUG] targetPkg: running [2025-08-22 09:24:57][352539599456549][265 ms][DEBUG] END check_scloud in 263 ms [2025-08-22 09:24:57][352539599456549][265 ms][DEBUG] START check_boot_completed [2025-08-22 09:24:57][352539599456549][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:24:57][352539599456549][296 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 09:24:57][352539599456549][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:24:57][352539599456549][343 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:24:57][352539599456549][343 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 09:24:57][352539599456549][343 ms][DEBUG] START check_internet [2025-08-22 09:24:57][352539599456549][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:24:58][352539599456549][874 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.511/202.511/202.511/0.000 ms\n [2025-08-22 09:24:58][352539599456549][874 ms][DEBUG] check_internet: online [2025-08-22 09:24:58][352539599456549][874 ms][DEBUG] END check_internet in 531 ms [2025-08-22 09:24:58][352539599456549][874 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:24:58][352539599456549][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539599456549\",\"model\":\"SM-S901B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW90ALVYT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3555\"}'\'' -e'"" [2025-08-22 09:24:58][352539599456549][874 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:24:58][352539599456549][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539599456549\",\"model\":\"SM-S901B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW90ALVYT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3555\"}'\'' -e'"" [2025-08-22 09:25:02][352539599456549][5295 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a6fcb51-7c7a-4d4f-aeb9-4e2612eee2bd","id":"QR_9a6fcb51-7c7a-4d4f-aeb9-4e2612eee2bd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:25:02][352539599456549][5451 ms][DEBUG] proc_open done in 4577 ms; code=255; res.len=3152 [2025-08-22 09:25:02][352539599456549][5451 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-22 09:25:02][352539599456549][5451 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:27:06][357967974181934][0 ms][INFO] === Request start === [2025-08-22 09:27:06][357967974181934][0 ms][DEBUG] START check_scloud [2025-08-22 09:27:06][357967974181934][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:27:07][357967974181934][260 ms][DEBUG] SU: done in 260 ms; outu0_a118 25951 4994 24297688 183944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:27:07][357967974181934][260 ms][DEBUG] targetPkg: running [2025-08-22 09:27:07][357967974181934][260 ms][DEBUG] END check_scloud in 260 ms [2025-08-22 09:27:07][357967974181934][260 ms][DEBUG] START check_boot_completed [2025-08-22 09:27:07][357967974181934][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:27:07][357967974181934][307 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 09:27:07][357967974181934][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:27:07][357967974181934][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:27:07][357967974181934][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 09:27:07][357967974181934][354 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:27:07][357967974181934][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974181934\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y2055MJK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4133\"}'\'' -e'"" [2025-08-22 09:27:07][357967974181934][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:27:07][357967974181934][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967974181934\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y2055MJK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4133\"}'\'' -e'"" [2025-08-22 09:27:11][357967974181934][4540 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0959ede-689f-4496-aafa-9e87ac4903da","id":"QR_b0959ede-689f-4496-aafa-9e87ac4903da","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:27:11][357967974181934][4696 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3152 [2025-08-22 09:27:11][357967974181934][4696 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-22 09:27:11][357967974181934][4696 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:28:33][354106241397469][1 ms][INFO] === Request start === [2025-08-22 09:28:33][354106241397469][1 ms][DEBUG] START check_scloud [2025-08-22 09:28:33][354106241397469][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:28:33][354106241397469][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 25951 4994 24450364 194552 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:28:33][354106241397469][317 ms][DEBUG] targetPkg: running [2025-08-22 09:28:33][354106241397469][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 09:28:33][354106241397469][317 ms][DEBUG] START check_boot_completed [2025-08-22 09:28:33][354106241397469][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:28:33][354106241397469][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:28:33][354106241397469][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:28:33][354106241397469][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:28:33][354106241397469][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 09:28:33][354106241397469][427 ms][DEBUG] START check_internet [2025-08-22 09:28:33][354106241397469][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:28:33][354106241397469][786 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.998/236.998/236.998/0.000 ms\n [2025-08-22 09:28:33][354106241397469][786 ms][DEBUG] check_internet: online [2025-08-22 09:28:33][354106241397469][786 ms][DEBUG] END check_internet in 359 ms [2025-08-22 09:28:33][354106241397469][786 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:28:33][354106241397469][786 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106241397469\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW30EDVKP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2228\"}'\'' -e'"" [2025-08-22 09:28:33][354106241397469][786 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:28:33][354106241397469][786 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106241397469\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW30EDVKP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2228\"}'\'' -e'"" [2025-08-22 09:28:38][354106241397469][5113 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6d0e5bc6-867e-438e-a300-e739dd1e3d81","id":"QR_6d0e5bc6-867e-438e-a300-e739dd1e3d81","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:28:38][354106241397469][5269 ms][DEBUG] proc_open done in 4482 ms; code=255; res.len=3152 [2025-08-22 09:28:38][354106241397469][5269 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-22 09:28:38][354106241397469][5269 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:28:56][352549938435278][0 ms][INFO] === Request start === [2025-08-22 09:28:56][352549938435278][1 ms][DEBUG] START check_scloud [2025-08-22 09:28:56][352549938435278][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:28:57][352549938435278][279 ms][DEBUG] SU: done in 278 ms; outu0_a118 25951 4994 24609248 206660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:28:57][352549938435278][279 ms][DEBUG] targetPkg: running [2025-08-22 09:28:57][352549938435278][279 ms][DEBUG] END check_scloud in 278 ms [2025-08-22 09:28:57][352549938435278][279 ms][DEBUG] START check_boot_completed [2025-08-22 09:28:57][352549938435278][279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:28:57][352549938435278][326 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:28:57][352549938435278][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:28:57][352549938435278][388 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:28:57][352549938435278][388 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 09:28:57][352549938435278][388 ms][DEBUG] START check_internet [2025-08-22 09:28:57][352549938435278][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:28:57][352549938435278][670 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.779/184.779/184.779/0.000 ms\n [2025-08-22 09:28:57][352549938435278][670 ms][DEBUG] check_internet: online [2025-08-22 09:28:57][352549938435278][670 ms][DEBUG] END check_internet in 281 ms [2025-08-22 09:28:57][352549938435278][670 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:28:57][352549938435278][670 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938435278\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X90Q0YTM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6542\"}'\'' -e'"" [2025-08-22 09:28:57][352549938435278][670 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:28:57][352549938435278][670 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549938435278\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X90Q0YTM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6542\"}'\'' -e'"" [2025-08-22 09:29:01][352549938435278][4684 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f862d81-3477-4e09-a761-6422571a2bfe","id":"QR_3f862d81-3477-4e09-a761-6422571a2bfe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:29:01][352549938435278][4840 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3152 [2025-08-22 09:29:01][352549938435278][4840 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-22 09:29:01][352549938435278][4840 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:30:08][352623177337436][1 ms][INFO] === Request start === [2025-08-22 09:30:08][352623177337436][2 ms][DEBUG] START check_scloud [2025-08-22 09:30:08][352623177337436][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:30:08][352623177337436][293 ms][DEBUG] SU: done in 291 ms; outu0_a118 25951 4994 24743492 217592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:30:08][352623177337436][293 ms][DEBUG] targetPkg: running [2025-08-22 09:30:08][352623177337436][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-22 09:30:08][352623177337436][293 ms][DEBUG] START check_boot_completed [2025-08-22 09:30:08][352623177337436][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:30:08][352623177337436][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:30:08][352623177337436][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:30:08][352623177337436][402 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:30:08][352623177337436][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 09:30:08][352623177337436][403 ms][DEBUG] START check_internet [2025-08-22 09:30:08][352623177337436][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:30:09][352623177337436][871 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.911/201.911/201.911/0.000 ms\n [2025-08-22 09:30:09][352623177337436][871 ms][DEBUG] check_internet: online [2025-08-22 09:30:09][352623177337436][871 ms][DEBUG] END check_internet in 469 ms [2025-08-22 09:30:09][352623177337436][871 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:30:09][352623177337436][871 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623177337436\",\"model\":\"SM-A166B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB1B2RRN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5382\"}'\'' -e'"" [2025-08-22 09:30:09][352623177337436][871 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:30:09][352623177337436][871 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623177337436\",\"model\":\"SM-A166B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CXB1B2RRN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5382\"}'\'' -e'"" [2025-08-22 09:30:13][352623177337436][4995 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_531601d1-bd4a-40f1-8538-69ae93fd0e00","id":"QR_531601d1-bd4a-40f1-8538-69ae93fd0e00","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:30:13][352623177337436][5151 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 09:30:13][352623177337436][5151 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 09:30:13][352623177337436][5151 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:33:34][351978523219089][1 ms][INFO] === Request start === [2025-08-22 09:33:34][351978523219089][2 ms][DEBUG] START check_scloud [2025-08-22 09:33:34][351978523219089][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:33:34][351978523219089][328 ms][DEBUG] SU: done in 326 ms; outu0_a118 25951 4994 24890024 123640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:33:34][351978523219089][328 ms][DEBUG] targetPkg: running [2025-08-22 09:33:34][351978523219089][328 ms][DEBUG] END check_scloud in 326 ms [2025-08-22 09:33:34][351978523219089][328 ms][DEBUG] START check_boot_completed [2025-08-22 09:33:34][351978523219089][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:33:34][351978523219089][359 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 09:33:34][351978523219089][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:33:34][351978523219089][407 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 09:33:34][351978523219089][407 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 09:33:34][351978523219089][407 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:33:34][351978523219089][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523219089\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W105GZEN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7830\"}'\'' -e'"" [2025-08-22 09:33:34][351978523219089][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:33:34][351978523219089][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978523219089\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W105GZEN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7830\"}'\'' -e'"" [2025-08-22 09:33:39][351978523219089][4546 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81bb0cf1-77b4-4718-96ee-d4a5d7f53290","id":"QR_81bb0cf1-77b4-4718-96ee-d4a5d7f53290","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:33:39][351978523219089][4702 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3152 [2025-08-22 09:33:39][351978523219089][4702 ms][DEBUG] END runCmdUntilRes#1 in 4294 ms [2025-08-22 09:33:39][351978523219089][4702 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:36:11][351662614958900][1 ms][INFO] === Request start === [2025-08-22 09:36:11][351662614958900][2 ms][DEBUG] START check_scloud [2025-08-22 09:36:11][351662614958900][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:36:11][351662614958900][323 ms][DEBUG] SU: done in 321 ms; outu0_a118 25951 4994 25051020 142680 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:36:11][351662614958900][323 ms][DEBUG] targetPkg: running [2025-08-22 09:36:11][351662614958900][323 ms][DEBUG] END check_scloud in 322 ms [2025-08-22 09:36:11][351662614958900][323 ms][DEBUG] START check_boot_completed [2025-08-22 09:36:11][351662614958900][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:36:11][351662614958900][370 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:36:11][351662614958900][370 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:36:11][351662614958900][432 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:36:11][351662614958900][433 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 09:36:11][351662614958900][433 ms][DEBUG] START check_internet [2025-08-22 09:36:11][351662614958900][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:36:12][351662614958900][917 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.806/200.806/200.806/0.000 ms\n [2025-08-22 09:36:12][351662614958900][917 ms][DEBUG] check_internet: online [2025-08-22 09:36:12][351662614958900][917 ms][DEBUG] END check_internet in 484 ms [2025-08-22 09:36:12][351662614958900][917 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:36:12][351662614958900][917 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351662614958900\",\"model\":\"SM-A217F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N85VGMJF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9869\"}'\'' -e'"" [2025-08-22 09:36:12][351662614958900][917 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:36:12][351662614958900][917 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351662614958900\",\"model\":\"SM-A217F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N85VGMJF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9869\"}'\'' -e'"" [2025-08-22 09:36:16][351662614958900][5369 ms][DEBUG] proc_open done in 4452 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 09:36:16][351662614958900][5369 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-22 09:36:16][351662614958900][5369 ms][WARN] Detected error: Process with pid 25951 either refused to load frida-agent, or terminated during injection [2025-08-22 09:36:16][351662614958900][5369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 09:36:16][351662614958900][5509 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 09:36:16][351662614958900][5509 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 09:36:16][351662614958900][5510 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 09:36:16][351662614958900][5650 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 09:36:16][351662614958900][5650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 09:36:17][351662614958900][5931 ms][DEBUG] SU: done in 281 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 09:36:19][351662614958900][7946 ms][DEBUG] START check_boot_completed [2025-08-22 09:36:19][351662614958900][7946 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:36:19][351662614958900][7993 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:36:19][351662614958900][7993 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:36:19][351662614958900][8056 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:36:19][351662614958900][8056 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 09:36:22][351662614958900][11070 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 09:36:22][351662614958900][11070 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351662614958900\",\"model\":\"SM-A217F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58N85VGMJF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"THL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9869\"}'\'' -e'"" [2025-08-22 09:36:26][351662614958900][15273 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b8c3cfa1-8c35-4cf7-aa04-dd31efcd0400","id":"QR_b8c3cfa1-8c35-4cf7-aa04-dd31efcd0400","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:36:26][351662614958900][15429 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3152 [2025-08-22 09:36:26][351662614958900][15429 ms][DEBUG] END runCmdUntilRes#2 in 4358 ms [2025-08-22 09:36:26][351662614958900][15429 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:37:20][353992853046572][0 ms][INFO] === Request start === [2025-08-22 09:37:20][353992853046572][1 ms][DEBUG] START check_scloud [2025-08-22 09:37:20][353992853046572][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:37:20][353992853046572][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 29180 4994 23628148 125884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:37:20][353992853046572][259 ms][DEBUG] targetPkg: running [2025-08-22 09:37:20][353992853046572][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-22 09:37:20][353992853046572][259 ms][DEBUG] START check_boot_completed [2025-08-22 09:37:20][353992853046572][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:37:21][353992853046572][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:37:21][353992853046572][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:37:21][353992853046572][369 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:37:21][353992853046572][369 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 09:37:21][353992853046572][369 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:37:21][353992853046572][369 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353992853046572\",\"model\":\"SM-S918N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW2023FYT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5886\"}'\'' -e'"" [2025-08-22 09:37:21][353992853046572][369 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:37:21][353992853046572][369 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353992853046572\",\"model\":\"SM-S918N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW2023FYT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5886\"}'\'' -e'"" [2025-08-22 09:37:25][353992853046572][4461 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d18845a2-662f-4616-a4bd-682d81dc0fcd","id":"QR_d18845a2-662f-4616-a4bd-682d81dc0fcd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:37:25][353992853046572][4617 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 09:37:25][353992853046572][4617 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-22 09:37:25][353992853046572][4618 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:41:07][351786693580085][1 ms][INFO] === Request start === [2025-08-22 09:41:07][351786693580085][2 ms][DEBUG] START check_scloud [2025-08-22 09:41:07][351786693580085][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:41:07][351786693580085][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 29180 4994 23713996 136956 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:41:07][351786693580085][317 ms][DEBUG] targetPkg: running [2025-08-22 09:41:07][351786693580085][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 09:41:07][351786693580085][317 ms][DEBUG] START check_boot_completed [2025-08-22 09:41:07][351786693580085][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:41:07][351786693580085][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 09:41:07][351786693580085][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:41:07][351786693580085][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 09:41:07][351786693580085][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 09:41:07][351786693580085][426 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:41:07][351786693580085][427 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693580085\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10SC74V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2569\"}'\'' -e'"" [2025-08-22 09:41:07][351786693580085][427 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:41:07][351786693580085][427 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693580085\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10SC74V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2569\"}'\'' -e'"" [2025-08-22 09:41:08][355898190679041][1 ms][INFO] === Request start === [2025-08-22 09:41:12][351786693580085][5097 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72a397f2-5f60-44f4-9f75-5c90557e83aa","id":"QR_72a397f2-5f60-44f4-9f75-5c90557e83aa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:41:12][351786693580085][5253 ms][DEBUG] proc_open done in 4826 ms; code=255; res.len=3152 [2025-08-22 09:41:12][351786693580085][5253 ms][DEBUG] END runCmdUntilRes#1 in 4827 ms [2025-08-22 09:41:12][351786693580085][5253 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:41:13][355898190679041][5065 ms][DEBUG] START check_scloud [2025-08-22 09:41:13][355898190679041][5065 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:41:13][355898190679041][5330 ms][DEBUG] SU: done in 266 ms; outu0_a118 29180 4994 23882516 148692 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:41:13][355898190679041][5331 ms][DEBUG] targetPkg: running [2025-08-22 09:41:13][355898190679041][5331 ms][DEBUG] END check_scloud in 266 ms [2025-08-22 09:41:13][355898190679041][5331 ms][DEBUG] START check_boot_completed [2025-08-22 09:41:13][355898190679041][5331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:41:13][355898190679041][5377 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 09:41:13][355898190679041][5377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:41:13][355898190679041][5424 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:41:13][355898190679041][5424 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 09:41:13][355898190679041][5424 ms][DEBUG] rawBody.length=1159 [2025-08-22 09:41:13][355898190679041][5424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355898190679041\",\"model\":\"SM-P610\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R54R902S5DN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7545\"}'\'' -e'"" [2025-08-22 09:41:13][355898190679041][5424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:41:13][355898190679041][5424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355898190679041\",\"model\":\"SM-P610\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R54R902S5DN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7545\"}'\'' -e'"" [2025-08-22 09:41:19][355898190679041][10735 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d594346-f3f8-4a22-84c3-c3da9225599b","id":"QR_9d594346-f3f8-4a22-84c3-c3da9225599b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:41:19][355898190679041][10892 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3152 [2025-08-22 09:41:19][355898190679041][10892 ms][DEBUG] END runCmdUntilRes#1 in 5468 ms [2025-08-22 09:41:19][355898190679041][10892 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:42:18][352419252135864][1 ms][INFO] === Request start === [2025-08-22 09:42:18][352419252135864][2 ms][DEBUG] START check_scloud [2025-08-22 09:42:18][352419252135864][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:42:18][352419252135864][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 29180 4994 23996372 159764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:42:18][352419252135864][311 ms][DEBUG] targetPkg: running [2025-08-22 09:42:18][352419252135864][311 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 09:42:18][352419252135864][311 ms][DEBUG] START check_boot_completed [2025-08-22 09:42:18][352419252135864][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:42:18][352419252135864][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 09:42:18][352419252135864][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:42:18][352419252135864][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:42:18][352419252135864][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 09:42:18][352419252135864][404 ms][DEBUG] START check_internet [2025-08-22 09:42:18][352419252135864][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:42:19][352419252135864][827 ms][DEBUG] SU: done in 423 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.930/199.930/199.930/0.000 ms\n [2025-08-22 09:42:19][352419252135864][827 ms][DEBUG] check_internet: online [2025-08-22 09:42:19][352419252135864][827 ms][DEBUG] END check_internet in 423 ms [2025-08-22 09:42:19][352419252135864][828 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:42:19][352419252135864][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352419252135864\",\"model\":\"SM-G525F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W91BAF6M\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5256\"}'\'' -e'"" [2025-08-22 09:42:19][352419252135864][828 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:42:19][352419252135864][828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352419252135864\",\"model\":\"SM-G525F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W91BAF6M\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5256\"}'\'' -e'"" [2025-08-22 09:42:23][352419252135864][4997 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7803eb80-5ee1-4b8e-b8b3-c5916a2525cc","id":"QR_7803eb80-5ee1-4b8e-b8b3-c5916a2525cc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:42:23][352419252135864][5153 ms][DEBUG] proc_open done in 4325 ms; code=255; res.len=3152 [2025-08-22 09:42:23][352419252135864][5153 ms][DEBUG] END runCmdUntilRes#1 in 4325 ms [2025-08-22 09:42:23][352419252135864][5153 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:48:36][351267962019279][1 ms][INFO] === Request start === [2025-08-22 09:48:36][351267962019279][2 ms][DEBUG] START check_scloud [2025-08-22 09:48:36][351267962019279][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:48:36][351267962019279][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 29180 4994 24102828 170792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:48:36][351267962019279][311 ms][DEBUG] targetPkg: running [2025-08-22 09:48:36][351267962019279][311 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 09:48:36][351267962019279][311 ms][DEBUG] START check_boot_completed [2025-08-22 09:48:36][351267962019279][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:48:36][351267962019279][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 09:48:36][351267962019279][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:48:36][351267962019279][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:48:36][351267962019279][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 09:48:36][351267962019279][389 ms][DEBUG] START check_internet [2025-08-22 09:48:36][351267962019279][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:48:37][351267962019279][889 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.593/200.593/200.593/0.000 ms\n [2025-08-22 09:48:37][351267962019279][889 ms][DEBUG] check_internet: online [2025-08-22 09:48:37][351267962019279][889 ms][DEBUG] END check_internet in 500 ms [2025-08-22 09:48:37][351267962019279][889 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:48:37][351267962019279][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267962019279\",\"model\":\"SM-A225F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T303QJ4N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6463\"}'\'' -e'"" [2025-08-22 09:48:37][351267962019279][889 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:48:37][351267962019279][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351267962019279\",\"model\":\"SM-A225F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T303QJ4N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MWD\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6463\"}'\'' -e'"" [2025-08-22 09:48:41][351267962019279][5216 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a5083666-1a2f-4faf-84c5-bb2e6004ced7","id":"QR_a5083666-1a2f-4faf-84c5-bb2e6004ced7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:48:41][351267962019279][5372 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3152 [2025-08-22 09:48:41][351267962019279][5372 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-22 09:48:41][351267962019279][5372 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:49:04][355008376803684][0 ms][INFO] === Request start === [2025-08-22 09:49:04][355008376803684][1 ms][DEBUG] START check_scloud [2025-08-22 09:49:04][355008376803684][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:49:04][355008376803684][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 29180 4994 24249620 182712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:49:04][355008376803684][310 ms][DEBUG] targetPkg: running [2025-08-22 09:49:04][355008376803684][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 09:49:04][355008376803684][310 ms][DEBUG] START check_boot_completed [2025-08-22 09:49:04][355008376803684][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:49:04][355008376803684][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 09:49:04][355008376803684][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:49:04][355008376803684][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:49:04][355008376803684][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 09:49:04][355008376803684][389 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:49:04][355008376803684][389 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355008376803684\",\"model\":\"SM-G781B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCRB00SQBW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5233\"}'\'' -e'"" [2025-08-22 09:49:04][355008376803684][389 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:49:04][355008376803684][389 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355008376803684\",\"model\":\"SM-G781B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCRB00SQBW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5233\"}'\'' -e'"" [2025-08-22 09:49:08][355008376803684][4341 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77c557ee-9e02-4a84-a68b-c3a412bbd5d0","id":"QR_77c557ee-9e02-4a84-a68b-c3a412bbd5d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:49:08][355008376803684][4497 ms][DEBUG] proc_open done in 4108 ms; code=255; res.len=3152 [2025-08-22 09:49:08][355008376803684][4497 ms][DEBUG] END runCmdUntilRes#1 in 4108 ms [2025-08-22 09:49:08][355008376803684][4497 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:50:12][358077200847164][0 ms][INFO] === Request start === [2025-08-22 09:50:12][358077200847164][1 ms][DEBUG] START check_scloud [2025-08-22 09:50:12][358077200847164][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:50:12][358077200847164][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 29180 4994 24361464 193648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:50:12][358077200847164][318 ms][DEBUG] targetPkg: running [2025-08-22 09:50:12][358077200847164][319 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 09:50:12][358077200847164][319 ms][DEBUG] START check_boot_completed [2025-08-22 09:50:12][358077200847164][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:50:12][358077200847164][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 09:50:12][358077200847164][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:50:12][358077200847164][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:50:12][358077200847164][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 09:50:12][358077200847164][412 ms][DEBUG] START check_internet [2025-08-22 09:50:12][358077200847164][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:50:13][358077200847164][865 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.227/200.227/200.227/0.000 ms\n [2025-08-22 09:50:13][358077200847164][865 ms][DEBUG] check_internet: online [2025-08-22 09:50:13][358077200847164][865 ms][DEBUG] END check_internet in 453 ms [2025-08-22 09:50:13][358077200847164][865 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:50:13][358077200847164][865 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077200847164\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8RA0J5D7X\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9366\"}'\'' -e'"" [2025-08-22 09:50:13][358077200847164][865 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:50:13][358077200847164][866 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358077200847164\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8RA0J5D7X\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9366\"}'\'' -e'"" [2025-08-22 09:50:17][358077200847164][4973 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3e90664b-0f26-4d9a-bcef-3732c5835b32","id":"QR_3e90664b-0f26-4d9a-bcef-3732c5835b32","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:50:17][358077200847164][5130 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3152 [2025-08-22 09:50:17][358077200847164][5130 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-22 09:50:17][358077200847164][5130 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:52:22][355195303609738][1 ms][INFO] === Request start === [2025-08-22 09:52:22][355195303609738][2 ms][DEBUG] START check_scloud [2025-08-22 09:52:22][355195303609738][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:52:22][355195303609738][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 29180 4994 24514204 205464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:52:22][355195303609738][311 ms][DEBUG] targetPkg: running [2025-08-22 09:52:22][355195303609738][311 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 09:52:22][355195303609738][311 ms][DEBUG] START check_boot_completed [2025-08-22 09:52:22][355195303609738][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:52:22][355195303609738][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 09:52:22][355195303609738][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:52:22][355195303609738][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:52:22][355195303609738][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 09:52:22][355195303609738][390 ms][DEBUG] START check_internet [2025-08-22 09:52:22][355195303609738][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:52:22][355195303609738][688 ms][DEBUG] SU: done in 299 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.079/181.079/181.079/0.000 ms\n [2025-08-22 09:52:22][355195303609738][688 ms][DEBUG] check_internet: online [2025-08-22 09:52:22][355195303609738][688 ms][DEBUG] END check_internet in 299 ms [2025-08-22 09:52:22][355195303609738][688 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:52:22][355195303609738][688 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195303609738\",\"model\":\"SM-S711B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CWC2VS4FN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1836\"}'\'' -e'"" [2025-08-22 09:52:22][355195303609738][688 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:52:22][355195303609738][689 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355195303609738\",\"model\":\"SM-S711B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CWC2VS4FN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1836\"}'\'' -e'"" [2025-08-22 09:52:27][355195303609738][5122 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d0833a8-030d-45b8-9859-5e7685be93e6","id":"QR_1d0833a8-030d-45b8-9859-5e7685be93e6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:52:27][355195303609738][5279 ms][DEBUG] proc_open done in 4590 ms; code=255; res.len=3152 [2025-08-22 09:52:27][355195303609738][5279 ms][DEBUG] END runCmdUntilRes#1 in 4590 ms [2025-08-22 09:52:27][355195303609738][5279 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:56:06][358212587540815][1 ms][INFO] === Request start === [2025-08-22 09:56:06][358212587540815][2 ms][DEBUG] START check_scloud [2025-08-22 09:56:06][358212587540815][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:56:07][358212587540815][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 29180 4994 24621824 216240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:56:07][358212587540815][311 ms][DEBUG] targetPkg: running [2025-08-22 09:56:07][358212587540815][311 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 09:56:07][358212587540815][311 ms][DEBUG] START check_boot_completed [2025-08-22 09:56:07][358212587540815][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:56:07][358212587540815][342 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 09:56:07][358212587540815][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:56:07][358212587540815][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:56:07][358212587540815][389 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 09:56:07][358212587540815][389 ms][DEBUG] START check_internet [2025-08-22 09:56:07][358212587540815][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 09:56:07][358212587540815][889 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.601/202.601/202.601/0.000 ms\n [2025-08-22 09:56:07][358212587540815][889 ms][DEBUG] check_internet: online [2025-08-22 09:56:07][358212587540815][889 ms][DEBUG] END check_internet in 500 ms [2025-08-22 09:56:07][358212587540815][889 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:56:07][358212587540815][889 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212587540815\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58WB0G1RJZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1831\"}'\'' -e'"" [2025-08-22 09:56:07][358212587540815][889 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:56:07][358212587540815][889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358212587540815\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58WB0G1RJZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1831\"}'\'' -e'"" [2025-08-22 09:56:11][358212587540815][4981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ac7a16c-d490-4aa9-86d6-44d4e6c06926","id":"QR_1ac7a16c-d490-4aa9-86d6-44d4e6c06926","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:56:11][358212587540815][5137 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 09:56:11][358212587540815][5138 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-22 09:56:11][358212587540815][5138 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 09:59:14][352630605691961][1 ms][INFO] === Request start === [2025-08-22 09:59:14][352630605691961][2 ms][DEBUG] START check_scloud [2025-08-22 09:59:14][352630605691961][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 09:59:14][352630605691961][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 29180 4994 24733540 228064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 09:59:14][352630605691961][312 ms][DEBUG] targetPkg: running [2025-08-22 09:59:14][352630605691961][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 09:59:14][352630605691961][312 ms][DEBUG] START check_boot_completed [2025-08-22 09:59:14][352630605691961][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 09:59:14][352630605691961][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 09:59:14][352630605691961][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 09:59:14][352630605691961][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 09:59:14][352630605691961][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 09:59:14][352630605691961][406 ms][DEBUG] rawBody.length=1161 [2025-08-22 09:59:14][352630605691961][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630605691961\",\"model\":\"SM-G996B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCR908QJNM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3733\"}'\'' -e'"" [2025-08-22 09:59:14][352630605691961][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 09:59:14][352630605691961][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352630605691961\",\"model\":\"SM-G996B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCR908QJNM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3733\"}'\'' -e'"" [2025-08-22 09:59:18][352630605691961][4545 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_72d945a3-16b9-49e7-a559-2d3a32825856","id":"QR_72d945a3-16b9-49e7-a559-2d3a32825856","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 09:59:19][352630605691961][4701 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3152 [2025-08-22 09:59:19][352630605691961][4701 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-22 09:59:19][352630605691961][4702 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:00:06][350287315541440][0 ms][INFO] === Request start === [2025-08-22 10:00:06][350287315541440][1 ms][DEBUG] START check_scloud [2025-08-22 10:00:06][350287315541440][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:00:06][350287315541440][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 29180 4994 24851468 239464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:00:06][350287315541440][312 ms][DEBUG] targetPkg: running [2025-08-22 10:00:06][350287315541440][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 10:00:06][350287315541440][312 ms][DEBUG] START check_boot_completed [2025-08-22 10:00:06][350287315541440][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:00:06][350287315541440][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:00:06][350287315541440][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:00:06][350287315541440][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:00:06][350287315541440][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:00:06][350287315541440][405 ms][DEBUG] START check_internet [2025-08-22 10:00:06][350287315541440][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:00:06][350287315541440][858 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.221/201.221/201.221/0.000 ms\n [2025-08-22 10:00:06][350287315541440][858 ms][DEBUG] check_internet: online [2025-08-22 10:00:06][350287315541440][858 ms][DEBUG] END check_internet in 453 ms [2025-08-22 10:00:06][350287315541440][858 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:00:06][350287315541440][858 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3025\"}'\'' -e'"" [2025-08-22 10:00:06][350287315541440][859 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:00:06][350287315541440][859 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3025\"}'\'' -e'"" [2025-08-22 10:00:10][350287315541440][4763 ms][DEBUG] proc_open done in 3905 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 10:00:10][350287315541440][4763 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-22 10:00:10][350287315541440][4763 ms][WARN] Detected error: Process with pid 29180 either refused to load frida-agent, or terminated during injection [2025-08-22 10:00:10][350287315541440][4763 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 10:00:11][350287315541440][4904 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 10:00:11][350287315541440][4904 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 10:00:11][350287315541440][4904 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 10:00:11][350287315541440][5029 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 10:00:11][350287315541440][5029 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 10:00:11][350287315541440][5201 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 10:00:13][350287315541440][7216 ms][DEBUG] START check_boot_completed [2025-08-22 10:00:13][350287315541440][7216 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:00:13][350287315541440][7263 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:00:13][350287315541440][7263 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:00:13][350287315541440][7310 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:00:13][350287315541440][7310 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 10:00:16][350287315541440][10324 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 10:00:16][350287315541440][10325 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3025\"}'\'' -e'"" [2025-08-22 10:00:20][350287315541440][14417 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8e1d097d-0a2e-41c4-bf77-461be1bd060e","id":"QR_8e1d097d-0a2e-41c4-bf77-461be1bd060e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:00:20][350287315541440][14573 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3152 [2025-08-22 10:00:20][350287315541440][14574 ms][DEBUG] END runCmdUntilRes#2 in 4249 ms [2025-08-22 10:00:20][350287315541440][14574 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:02:22][355303380473545][1 ms][INFO] === Request start === [2025-08-22 10:02:22][355303380473545][2 ms][DEBUG] START check_scloud [2025-08-22 10:02:22][355303380473545][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:02:22][355303380473545][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 31043 4994 23664004 126172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:02:22][355303380473545][299 ms][DEBUG] targetPkg: running [2025-08-22 10:02:22][355303380473545][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 10:02:22][355303380473545][299 ms][DEBUG] START check_boot_completed [2025-08-22 10:02:22][355303380473545][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:02:22][355303380473545][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 10:02:22][355303380473545][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:02:22][355303380473545][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:02:22][355303380473545][377 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 10:02:22][355303380473545][377 ms][DEBUG] START check_internet [2025-08-22 10:02:22][355303380473545][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:02:22][355303380473545][721 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.670/257.670/257.670/0.000 ms\n [2025-08-22 10:02:22][355303380473545][721 ms][DEBUG] check_internet: online [2025-08-22 10:02:22][355303380473545][721 ms][DEBUG] END check_internet in 344 ms [2025-08-22 10:02:22][355303380473545][721 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:02:22][355303380473545][721 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355303380473545\",\"model\":\"SM-S928J\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX724S3AA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2787\"}'\'' -e'"" [2025-08-22 10:02:22][355303380473545][721 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:02:22][355303380473545][721 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355303380473545\",\"model\":\"SM-S928J\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX724S3AA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KDI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2787\"}'\'' -e'"" [2025-08-22 10:02:26][355303380473545][4876 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c8f30eb7-24cd-4635-a737-cf32d79e24d3","id":"QR_c8f30eb7-24cd-4635-a737-cf32d79e24d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:02:27][355303380473545][5033 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3152 [2025-08-22 10:02:27][355303380473545][5033 ms][DEBUG] END runCmdUntilRes#1 in 4312 ms [2025-08-22 10:02:27][355303380473545][5033 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:05:21][358132920654695][1 ms][INFO] === Request start === [2025-08-22 10:05:21][358132920654695][2 ms][DEBUG] START check_scloud [2025-08-22 10:05:21][358132920654695][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:05:21][358132920654695][246 ms][DEBUG] SU: done in 245 ms; outu0_a118 31043 4994 23794152 137052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:05:21][358132920654695][246 ms][DEBUG] targetPkg: running [2025-08-22 10:05:21][358132920654695][246 ms][DEBUG] END check_scloud in 245 ms [2025-08-22 10:05:21][358132920654695][246 ms][DEBUG] START check_boot_completed [2025-08-22 10:05:21][358132920654695][246 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:05:21][358132920654695][278 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 10:05:21][358132920654695][278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:05:21][358132920654695][325 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:05:21][358132920654695][325 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 10:05:21][358132920654695][325 ms][DEBUG] rawBody.length=1160 [2025-08-22 10:05:21][358132920654695][325 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358132920654695\",\"model\":\"SM-X200\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTB0F9NBX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8382\"}'\'' -e'"" [2025-08-22 10:05:21][358132920654695][325 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:05:21][358132920654695][325 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358132920654695\",\"model\":\"SM-X200\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9YTB0F9NBX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8382\"}'\'' -e'"" [2025-08-22 10:05:26][358132920654695][4542 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c424763-cbba-423e-a948-7f05e09d710a","id":"QR_5c424763-cbba-423e-a948-7f05e09d710a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:05:26][358132920654695][4699 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3152 [2025-08-22 10:05:26][358132920654695][4699 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-22 10:05:26][358132920654695][4699 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:06:29][353842196601601][0 ms][INFO] === Request start === [2025-08-22 10:06:29][353842196601601][1 ms][DEBUG] START check_scloud [2025-08-22 10:06:29][353842196601601][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:06:29][353842196601601][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 31043 4994 23914124 148896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:06:29][353842196601601][297 ms][DEBUG] targetPkg: running [2025-08-22 10:06:29][353842196601601][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-22 10:06:29][353842196601601][297 ms][DEBUG] START check_boot_completed [2025-08-22 10:06:29][353842196601601][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:06:29][353842196601601][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:06:29][353842196601601][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:06:29][353842196601601][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:06:29][353842196601601][390 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:06:29][353842196601601][390 ms][DEBUG] START check_internet [2025-08-22 10:06:29][353842196601601][390 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:06:30][353842196601601][843 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.866/199.866/199.866/0.000 ms\n [2025-08-22 10:06:30][353842196601601][843 ms][DEBUG] check_internet: online [2025-08-22 10:06:30][353842196601601][843 ms][DEBUG] END check_internet in 453 ms [2025-08-22 10:06:30][353842196601601][843 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:06:30][353842196601601][843 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842196601601\",\"model\":\"SM-A536E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA1YC5DY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5882\"}'\'' -e'"" [2025-08-22 10:06:30][353842196601601][843 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:06:30][353842196601601][844 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842196601601\",\"model\":\"SM-A536E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA1YC5DY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XNZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5882\"}'\'' -e'"" [2025-08-22 10:06:34][353842196601601][5482 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_00f26d9d-73a0-42b6-95c1-f638766623d1","id":"QR_00f26d9d-73a0-42b6-95c1-f638766623d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:06:35][353842196601601][5638 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3152 [2025-08-22 10:06:35][353842196601601][5638 ms][DEBUG] END runCmdUntilRes#1 in 4795 ms [2025-08-22 10:06:35][353842196601601][5639 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:06:42][352294621751158][0 ms][INFO] === Request start === [2025-08-22 10:06:42][352294621751158][1 ms][DEBUG] START check_scloud [2025-08-22 10:06:42][352294621751158][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:06:42][352294621751158][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 31043 4994 24073108 159920 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:06:42][352294621751158][314 ms][DEBUG] targetPkg: running [2025-08-22 10:06:42][352294621751158][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 10:06:42][352294621751158][314 ms][DEBUG] START check_boot_completed [2025-08-22 10:06:42][352294621751158][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:06:43][352294621751158][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:06:43][352294621751158][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:06:43][352294621751158][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:06:43][352294621751158][407 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:06:43][352294621751158][407 ms][DEBUG] START check_internet [2025-08-22 10:06:43][352294621751158][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:06:43][352294621751158][690 ms][DEBUG] SU: done in 283 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=183 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 183.447/183.447/183.447/0.000 ms\n [2025-08-22 10:06:43][352294621751158][690 ms][DEBUG] check_internet: online [2025-08-22 10:06:43][352294621751158][691 ms][DEBUG] END check_internet in 283 ms [2025-08-22 10:06:43][352294621751158][691 ms][DEBUG] rawBody.length=1160 [2025-08-22 10:06:43][352294621751158][691 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294621751158\",\"model\":\"SM-P619\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T903NA9T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"BTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7977\"}'\'' -e'"" [2025-08-22 10:06:43][352294621751158][691 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:06:43][352294621751158][691 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352294621751158\",\"model\":\"SM-P619\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52T903NA9T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"BTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7977\"}'\'' -e'"" [2025-08-22 10:06:47][352294621751158][4562 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13e366a4-f6e3-4438-b16e-4d7d23ee26c4","id":"QR_13e366a4-f6e3-4438-b16e-4d7d23ee26c4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:06:47][352294621751158][4718 ms][DEBUG] proc_open done in 4028 ms; code=255; res.len=3152 [2025-08-22 10:06:47][352294621751158][4719 ms][DEBUG] END runCmdUntilRes#1 in 4028 ms [2025-08-22 10:06:47][352294621751158][4719 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:14:12][352838656583090][1 ms][INFO] === Request start === [2025-08-22 10:14:12][352838656583090][2 ms][DEBUG] START check_scloud [2025-08-22 10:14:12][352838656583090][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:14:12][352838656583090][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 31043 4994 24177672 171864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:14:12][352838656583090][308 ms][DEBUG] targetPkg: running [2025-08-22 10:14:12][352838656583090][308 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 10:14:12][352838656583090][308 ms][DEBUG] START check_boot_completed [2025-08-22 10:14:12][352838656583090][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:14:12][352838656583090][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:14:12][352838656583090][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:14:12][352838656583090][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:14:12][352838656583090][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:14:12][352838656583090][400 ms][DEBUG] START check_internet [2025-08-22 10:14:12][352838656583090][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:14:13][352838656583090][869 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.506/199.506/199.506/0.000 ms\n [2025-08-22 10:14:13][352838656583090][869 ms][DEBUG] check_internet: online [2025-08-22 10:14:13][352838656583090][869 ms][DEBUG] END check_internet in 469 ms [2025-08-22 10:14:13][352838656583090][869 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:14:13][352838656583090][869 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656583090\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWB077PGJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7938\"}'\'' -e'"" [2025-08-22 10:14:13][352838656583090][870 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:14:13][352838656583090][870 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656583090\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWB077PGJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7938\"}'\'' -e'"" [2025-08-22 10:14:17][352838656583090][5118 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36e435e5-154d-4427-908a-252e3d0c6ffe","id":"QR_36e435e5-154d-4427-908a-252e3d0c6ffe","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:14:17][352838656583090][5274 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3152 [2025-08-22 10:14:17][352838656583090][5274 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-22 10:14:17][352838656583090][5274 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:15:06][350048584005073][1 ms][INFO] === Request start === [2025-08-22 10:15:06][350048584005073][1 ms][DEBUG] START check_scloud [2025-08-22 10:15:06][350048584005073][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:15:07][350048584005073][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 31043 4994 24304956 183796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:15:07][350048584005073][263 ms][DEBUG] targetPkg: running [2025-08-22 10:15:07][350048584005073][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-22 10:15:07][350048584005073][263 ms][DEBUG] START check_boot_completed [2025-08-22 10:15:07][350048584005073][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:15:07][350048584005073][310 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:15:07][350048584005073][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:15:07][350048584005073][373 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:15:07][350048584005073][373 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 10:15:07][350048584005073][373 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:15:07][350048584005073][373 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048584005073\",\"model\":\"SM-S908B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA1ER5JV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9429\"}'\'' -e'"" [2025-08-22 10:15:07][350048584005073][373 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:15:07][350048584005073][373 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350048584005073\",\"model\":\"SM-S908B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA1ER5JV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9429\"}'\'' -e'"" [2025-08-22 10:15:10][350048584005073][4137 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52d91f6e-75dd-4e57-8af5-fd95c74a849f","id":"QR_52d91f6e-75dd-4e57-8af5-fd95c74a849f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:15:11][350048584005073][4294 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3152 [2025-08-22 10:15:11][350048584005073][4294 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-22 10:15:11][350048584005073][4294 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:15:17][352469851920497][1 ms][INFO] === Request start === [2025-08-22 10:15:17][352469851920497][2 ms][DEBUG] START check_scloud [2025-08-22 10:15:17][352469851920497][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:15:17][352469851920497][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 31043 4994 24478276 194560 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:15:17][352469851920497][316 ms][DEBUG] targetPkg: running [2025-08-22 10:15:17][352469851920497][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 10:15:17][352469851920497][316 ms][DEBUG] START check_boot_completed [2025-08-22 10:15:17][352469851920497][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:15:17][352469851920497][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:15:17][352469851920497][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:15:17][352469851920497][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:15:17][352469851920497][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:15:17][352469851920497][410 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:15:17][352469851920497][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469851920497\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T355DQAA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8761\"}'\'' -e'"" [2025-08-22 10:15:17][352469851920497][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:15:17][352469851920497][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469851920497\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T355DQAA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8761\"}'\'' -e'"" [2025-08-22 10:15:22][352469851920497][4768 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4ef4ab5a-9ae0-48af-88aa-0cd4705b350e","id":"QR_4ef4ab5a-9ae0-48af-88aa-0cd4705b350e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:15:22][352469851920497][4924 ms][DEBUG] proc_open done in 4514 ms; code=255; res.len=3152 [2025-08-22 10:15:22][352469851920497][4924 ms][DEBUG] END runCmdUntilRes#1 in 4514 ms [2025-08-22 10:15:22][352469851920497][4924 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:16:06][350330052303499][1 ms][INFO] === Request start === [2025-08-22 10:16:06][350330052303499][2 ms][DEBUG] START check_scloud [2025-08-22 10:16:06][350330052303499][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:16:06][350330052303499][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 31043 4994 24614596 206484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:16:06][350330052303499][264 ms][DEBUG] targetPkg: running [2025-08-22 10:16:06][350330052303499][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-22 10:16:06][350330052303499][264 ms][DEBUG] START check_boot_completed [2025-08-22 10:16:06][350330052303499][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:16:06][350330052303499][295 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 10:16:06][350330052303499][295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:16:06][350330052303499][342 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:16:06][350330052303499][342 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 10:16:06][350330052303499][342 ms][DEBUG] START check_internet [2025-08-22 10:16:06][350330052303499][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:16:06][350330052303499][608 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.712/169.712/169.712/0.000 ms\n [2025-08-22 10:16:06][350330052303499][608 ms][DEBUG] check_internet: online [2025-08-22 10:16:06][350330052303499][608 ms][DEBUG] END check_internet in 266 ms [2025-08-22 10:16:06][350330052303499][608 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:16:06][350330052303499][608 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330052303499\",\"model\":\"SM-S901B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT621V67L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4513\"}'\'' -e'"" [2025-08-22 10:16:06][350330052303499][608 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:16:06][350330052303499][608 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350330052303499\",\"model\":\"SM-S901B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CT621V67L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4513\"}'\'' -e'"" [2025-08-22 10:16:10][350330052303499][4529 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34e7310b-58d8-4995-a05c-933774cd33a5","id":"QR_34e7310b-58d8-4995-a05c-933774cd33a5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:16:11][350330052303499][4685 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3152 [2025-08-22 10:16:11][350330052303499][4685 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-22 10:16:11][350330052303499][4685 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:16:18][350756488044648][0 ms][INFO] === Request start === [2025-08-22 10:16:18][350756488044648][1 ms][DEBUG] START check_scloud [2025-08-22 10:16:18][350756488044648][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:16:18][350756488044648][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 31043 4994 24734668 217104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:16:18][350756488044648][310 ms][DEBUG] targetPkg: running [2025-08-22 10:16:18][350756488044648][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 10:16:18][350756488044648][310 ms][DEBUG] START check_boot_completed [2025-08-22 10:16:18][350756488044648][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:16:18][350756488044648][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:16:18][350756488044648][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:16:18][350756488044648][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:16:18][350756488044648][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 10:16:18][350756488044648][404 ms][DEBUG] START check_internet [2025-08-22 10:16:18][350756488044648][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:16:18][350756488044648][671 ms][DEBUG] SU: done in 267 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=160 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 160.457/160.457/160.457/0.000 ms\n [2025-08-22 10:16:18][350756488044648][671 ms][DEBUG] check_internet: online [2025-08-22 10:16:18][350756488044648][671 ms][DEBUG] END check_internet in 267 ms [2025-08-22 10:16:18][350756488044648][671 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:16:18][350756488044648][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756488044648\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CWA1TDX2K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6276\"}'\'' -e'"" [2025-08-22 10:16:18][350756488044648][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:16:18][350756488044648][671 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350756488044648\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CWA1TDX2K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6276\"}'\'' -e'"" [2025-08-22 10:16:23][350756488044648][5027 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3b40b58e-9d41-4033-84d8-dd57a34adcdc","id":"QR_3b40b58e-9d41-4033-84d8-dd57a34adcdc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:16:23][350756488044648][5183 ms][DEBUG] proc_open done in 4512 ms; code=255; res.len=3152 [2025-08-22 10:16:23][350756488044648][5183 ms][DEBUG] END runCmdUntilRes#1 in 4512 ms [2025-08-22 10:16:23][350756488044648][5183 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:16:29][353372910693932][0 ms][INFO] === Request start === [2025-08-22 10:16:29][353372910693932][1 ms][DEBUG] START check_scloud [2025-08-22 10:16:29][353372910693932][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:16:30][353372910693932][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 31043 4994 24866864 228860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:16:30][353372910693932][308 ms][DEBUG] targetPkg: running [2025-08-22 10:16:30][353372910693932][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 10:16:30][353372910693932][308 ms][DEBUG] START check_boot_completed [2025-08-22 10:16:30][353372910693932][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:16:30][353372910693932][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:16:30][353372910693932][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:16:30][353372910693932][417 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:16:30][353372910693932][417 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 10:16:30][353372910693932][417 ms][DEBUG] START check_internet [2025-08-22 10:16:30][353372910693932][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:16:30][353372910693932][729 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.079/172.079/172.079/0.000 ms\n [2025-08-22 10:16:30][353372910693932][729 ms][DEBUG] check_internet: online [2025-08-22 10:16:30][353372910693932][729 ms][DEBUG] END check_internet in 312 ms [2025-08-22 10:16:30][353372910693932][729 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:16:30][353372910693932][729 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372910693932\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT32R3E2H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1776\"}'\'' -e'"" [2025-08-22 10:16:30][353372910693932][729 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:16:30][353372910693932][729 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353372910693932\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT32R3E2H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1776\"}'\'' -e'"" [2025-08-22 10:16:34][353372910693932][4744 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b9cdc85-3707-4fe5-9a17-232d58ab371e","id":"QR_1b9cdc85-3707-4fe5-9a17-232d58ab371e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:16:34][353372910693932][4900 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3152 [2025-08-22 10:16:34][353372910693932][4900 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-22 10:16:34][353372910693932][4900 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:16:41][355320548728677][1 ms][INFO] === Request start === [2025-08-22 10:16:41][355320548728677][1 ms][DEBUG] START check_scloud [2025-08-22 10:16:41][355320548728677][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:16:42][355320548728677][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 31043 4994 25033940 239668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:16:42][355320548728677][302 ms][DEBUG] targetPkg: running [2025-08-22 10:16:42][355320548728677][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 10:16:42][355320548728677][302 ms][DEBUG] START check_boot_completed [2025-08-22 10:16:42][355320548728677][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:16:42][355320548728677][347 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 10:16:42][355320548728677][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:16:42][355320548728677][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:16:42][355320548728677][410 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-22 10:16:42][355320548728677][410 ms][DEBUG] START check_internet [2025-08-22 10:16:42][355320548728677][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:16:42][355320548728677][722 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=183 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 183.733/183.733/183.733/0.000 ms\n [2025-08-22 10:16:42][355320548728677][722 ms][DEBUG] check_internet: online [2025-08-22 10:16:42][355320548728677][722 ms][DEBUG] END check_internet in 312 ms [2025-08-22 10:16:42][355320548728677][722 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:16:42][355320548728677][722 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320548728677\",\"model\":\"SM-G991B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CRB272M5P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3696\"}'\'' -e'"" [2025-08-22 10:16:42][355320548728677][722 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:16:42][355320548728677][722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320548728677\",\"model\":\"SM-G991B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CRB272M5P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3696\"}'\'' -e'"" [2025-08-22 10:16:46][355320548728677][4502 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 10:16:46][355320548728677][4502 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-22 10:16:46][355320548728677][4502 ms][WARN] Detected error: Process with pid 31043 either refused to load frida-agent, or terminated during injection [2025-08-22 10:16:46][355320548728677][4502 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 10:16:46][355320548728677][4644 ms][DEBUG] SU: done in 142 ms; out [2025-08-22 10:16:46][355320548728677][4644 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 10:16:46][355320548728677][4644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 10:16:46][355320548728677][4784 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 10:16:46][355320548728677][4784 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 10:16:46][355320548728677][4940 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 10:16:48][355320548728677][6955 ms][DEBUG] START check_boot_completed [2025-08-22 10:16:48][355320548728677][6955 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:16:48][355320548728677][7002 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:16:48][355320548728677][7002 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:16:48][355320548728677][7049 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:16:48][355320548728677][7049 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 10:16:51][355320548728677][10063 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 10:16:51][355320548728677][10064 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355320548728677\",\"model\":\"SM-G991B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CRB272M5P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3696\"}'\'' -e'"" [2025-08-22 10:16:55][355320548728677][13953 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f5d7a8c-f8e2-44ed-9ab0-90f0d080ecb0","id":"QR_0f5d7a8c-f8e2-44ed-9ab0-90f0d080ecb0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:16:55][355320548728677][14109 ms][DEBUG] proc_open done in 4046 ms; code=255; res.len=3152 [2025-08-22 10:16:55][355320548728677][14109 ms][DEBUG] END runCmdUntilRes#2 in 4046 ms [2025-08-22 10:16:55][355320548728677][14109 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:21:10][355478285223268][1 ms][INFO] === Request start === [2025-08-22 10:21:10][355478285223268][2 ms][DEBUG] START check_scloud [2025-08-22 10:21:10][355478285223268][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:21:10][355478285223268][319 ms][DEBUG] SU: done in 317 ms; outu0_a118 746 4994 23639488 125968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:21:10][355478285223268][319 ms][DEBUG] targetPkg: running [2025-08-22 10:21:10][355478285223268][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-22 10:21:10][355478285223268][319 ms][DEBUG] START check_boot_completed [2025-08-22 10:21:10][355478285223268][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:21:10][355478285223268][351 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 10:21:10][355478285223268][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:21:10][355478285223268][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:21:10][355478285223268][397 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 10:21:10][355478285223268][397 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:21:10][355478285223268][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478285223268\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R6CWA021Q3R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8177\"}'\'' -e'"" [2025-08-22 10:21:10][355478285223268][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:21:10][355478285223268][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355478285223268\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R6CWA021Q3R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8177\"}'\'' -e'"" [2025-08-22 10:21:11][352539591772620][1 ms][INFO] === Request start === [2025-08-22 10:21:14][355478285223268][4521 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0eed0fd1-88cb-49bd-b460-f0d784845f9a","id":"QR_0eed0fd1-88cb-49bd-b460-f0d784845f9a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:21:14][355478285223268][4678 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 10:21:14][355478285223268][4678 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 10:21:14][355478285223268][4678 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:21:15][352539591772620][4060 ms][DEBUG] START check_scloud [2025-08-22 10:21:15][352539591772620][4060 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:21:15][352539591772620][4341 ms][DEBUG] SU: done in 281 ms; outu0_a118 746 4994 23820808 136972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:21:15][352539591772620][4341 ms][DEBUG] targetPkg: running [2025-08-22 10:21:15][352539591772620][4341 ms][DEBUG] END check_scloud in 281 ms [2025-08-22 10:21:15][352539591772620][4341 ms][DEBUG] START check_boot_completed [2025-08-22 10:21:15][352539591772620][4341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:21:15][352539591772620][4373 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 10:21:15][352539591772620][4373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:21:15][352539591772620][4435 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:21:15][352539591772620][4435 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 10:21:15][352539591772620][4435 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:21:15][352539591772620][4435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539591772620\",\"model\":\"SM-S901B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTB08VG3T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6515\"}'\'' -e'"" [2025-08-22 10:21:15][352539591772620][4435 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:21:15][352539591772620][4435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352539591772620\",\"model\":\"SM-S901B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTB08VG3T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6515\"}'\'' -e'"" [2025-08-22 10:21:19][352539591772620][8262 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ebf3b77-b346-40f2-ba7a-0be9e0456e90","id":"QR_0ebf3b77-b346-40f2-ba7a-0be9e0456e90","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:21:19][352539591772620][8419 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3152 [2025-08-22 10:21:19][352539591772620][8419 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-22 10:21:19][352539591772620][8419 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:22:06][350695340715823][1 ms][INFO] === Request start === [2025-08-22 10:22:06][350695340715823][2 ms][DEBUG] START check_scloud [2025-08-22 10:22:06][350695340715823][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:22:07][350695340715823][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 746 4994 23910088 149048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:22:07][350695340715823][307 ms][DEBUG] targetPkg: running [2025-08-22 10:22:07][350695340715823][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 10:22:07][350695340715823][307 ms][DEBUG] START check_boot_completed [2025-08-22 10:22:07][350695340715823][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:22:07][350695340715823][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:22:07][350695340715823][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:22:07][350695340715823][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:22:07][350695340715823][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 10:22:07][350695340715823][416 ms][DEBUG] START check_internet [2025-08-22 10:22:07][350695340715823][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:22:07][350695340715823][900 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.870/201.870/201.870/0.000 ms\n [2025-08-22 10:22:07][350695340715823][900 ms][DEBUG] check_internet: online [2025-08-22 10:22:07][350695340715823][900 ms][DEBUG] END check_internet in 484 ms [2025-08-22 10:22:07][350695340715823][900 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:22:07][350695340715823][900 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350695340715823\",\"model\":\"SM-S906B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT30SD7KM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5688\"}'\'' -e'"" [2025-08-22 10:22:07][350695340715823][900 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:22:07][350695340715823][900 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350695340715823\",\"model\":\"SM-S906B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT30SD7KM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5688\"}'\'' -e'"" [2025-08-22 10:22:11][350695340715823][4774 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a05a255-1ebd-424e-948c-3abe025e3cd9","id":"QR_5a05a255-1ebd-424e-948c-3abe025e3cd9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:22:11][350695340715823][4931 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3152 [2025-08-22 10:22:11][350695340715823][4931 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-22 10:22:11][350695340715823][4931 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:22:34][350320360750994][0 ms][INFO] === Request start === [2025-08-22 10:22:34][350320360750994][0 ms][DEBUG] START check_scloud [2025-08-22 10:22:34][350320360750994][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:22:34][350320360750994][318 ms][DEBUG] SU: done in 318 ms; outu0_a118 746 4994 24062700 160180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:22:34][350320360750994][318 ms][DEBUG] targetPkg: running [2025-08-22 10:22:34][350320360750994][318 ms][DEBUG] END check_scloud in 318 ms [2025-08-22 10:22:34][350320360750994][318 ms][DEBUG] START check_boot_completed [2025-08-22 10:22:34][350320360750994][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:22:34][350320360750994][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:22:34][350320360750994][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:22:34][350320360750994][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:22:34][350320360750994][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:22:34][350320360750994][412 ms][DEBUG] START check_internet [2025-08-22 10:22:34][350320360750994][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:22:34][350320360750994][709 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.085/193.085/193.085/0.000 ms\n [2025-08-22 10:22:34][350320360750994][709 ms][DEBUG] check_internet: online [2025-08-22 10:22:34][350320360750994][709 ms][DEBUG] END check_internet in 297 ms [2025-08-22 10:22:34][350320360750994][709 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:22:34][350320360750994][709 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320360750994\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3509\"}'\'' -e'"" [2025-08-22 10:22:34][350320360750994][709 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:22:34][350320360750994][709 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320360750994\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3509\"}'\'' -e'"" [2025-08-22 10:22:38][350320360750994][4582 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 10:22:38][350320360750994][4739 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=115 [2025-08-22 10:22:38][350320360750994][4739 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-22 10:22:38][350320360750994][4739 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 10:22:39][][0 ms][INFO] === Request start === [2025-08-22 10:22:39][][1 ms][DEBUG] START check_scloud [2025-08-22 10:22:39][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:22:39][][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 746 4994 24205172 170804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:22:39][][306 ms][DEBUG] targetPkg: running [2025-08-22 10:22:39][][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 10:22:39][][306 ms][DEBUG] START check_boot_completed [2025-08-22 10:22:39][][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:22:39][][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:22:39][][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:22:39][][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:22:39][][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 10:22:39][][416 ms][DEBUG] START check_internet [2025-08-22 10:22:39][][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:22:39][][697 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.157/144.157/144.157/0.000 ms\n [2025-08-22 10:22:39][][697 ms][DEBUG] check_internet: online [2025-08-22 10:22:39][][697 ms][DEBUG] END check_internet in 281 ms [2025-08-22 10:22:39][][697 ms][DEBUG] rawBody.length=1131 [2025-08-22 10:22:39][][697 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8158\"}'\'' -e'"" [2025-08-22 10:22:39][][697 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:22:39][][697 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8158\"}'\'' -e'"" [2025-08-22 10:22:43][][4196 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 10:22:43][][4352 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=115 [2025-08-22 10:22:43][][4352 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-22 10:22:43][][4352 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 10:22:43][][0 ms][INFO] === Request start === [2025-08-22 10:22:43][][1 ms][DEBUG] START check_scloud [2025-08-22 10:22:43][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:22:44][][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 746 4994 24324860 182464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:22:44][][314 ms][DEBUG] targetPkg: running [2025-08-22 10:22:44][][314 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 10:22:44][][314 ms][DEBUG] START check_boot_completed [2025-08-22 10:22:44][][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:22:44][][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:22:44][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:22:44][][410 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 10:22:44][][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 10:22:44][][410 ms][DEBUG] START check_internet [2025-08-22 10:22:44][][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:22:44][][673 ms][DEBUG] SU: done in 263 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.703/139.703/139.703/0.000 ms\n [2025-08-22 10:22:44][][674 ms][DEBUG] check_internet: online [2025-08-22 10:22:44][][674 ms][DEBUG] END check_internet in 264 ms [2025-08-22 10:22:44][][674 ms][DEBUG] rawBody.length=1131 [2025-08-22 10:22:44][][674 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1939\"}'\'' -e'"" [2025-08-22 10:22:44][][674 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:22:44][][674 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1939\"}'\'' -e'"" [2025-08-22 10:22:48][][4094 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 10:22:48][][4251 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=115 [2025-08-22 10:22:48][][4251 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-22 10:22:48][][4251 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 10:22:50][350320360750994][0 ms][INFO] === Request start === [2025-08-22 10:22:50][350320360750994][1 ms][DEBUG] START check_scloud [2025-08-22 10:22:50][350320360750994][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:22:50][350320360750994][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 746 4994 24482940 194336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:22:50][350320360750994][314 ms][DEBUG] targetPkg: running [2025-08-22 10:22:50][350320360750994][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 10:22:50][350320360750994][314 ms][DEBUG] START check_boot_completed [2025-08-22 10:22:50][350320360750994][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:22:50][350320360750994][360 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:22:50][350320360750994][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:22:51][350320360750994][454 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 10:22:51][350320360750994][454 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-22 10:22:51][350320360750994][454 ms][DEBUG] START check_internet [2025-08-22 10:22:51][350320360750994][454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:22:51][350320360750994][751 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.853/139.853/139.853/0.000 ms\n [2025-08-22 10:22:51][350320360750994][751 ms][DEBUG] check_internet: online [2025-08-22 10:22:51][350320360750994][751 ms][DEBUG] END check_internet in 297 ms [2025-08-22 10:22:51][350320360750994][751 ms][DEBUG] rawBody.length=1160 [2025-08-22 10:22:51][350320360750994][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320360750994\",\"model\":\"SM-A546E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8300\"}'\'' -e'"" [2025-08-22 10:22:51][350320360750994][752 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:22:51][350320360750994][752 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320360750994\",\"model\":\"SM-A546E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8300\"}'\'' -e'"" [2025-08-22 10:22:57][350320360750994][7312 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_39e363ed-094b-46fd-9c3f-4f061be9c8fb","id":"QR_39e363ed-094b-46fd-9c3f-4f061be9c8fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:22:58][350320360750994][7468 ms][DEBUG] proc_open done in 6716 ms; code=255; res.len=3152 [2025-08-22 10:22:58][350320360750994][7468 ms][DEBUG] END runCmdUntilRes#1 in 6716 ms [2025-08-22 10:22:58][350320360750994][7468 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:25:42][350091124922381][1 ms][INFO] === Request start === [2025-08-22 10:25:42][350091124922381][2 ms][DEBUG] START check_scloud [2025-08-22 10:25:42][350091124922381][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:25:42][350091124922381][295 ms][DEBUG] SU: done in 293 ms; outu0_a118 746 4994 24543348 205828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:25:42][350091124922381][295 ms][DEBUG] targetPkg: running [2025-08-22 10:25:42][350091124922381][295 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 10:25:42][350091124922381][295 ms][DEBUG] START check_boot_completed [2025-08-22 10:25:42][350091124922381][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:25:42][350091124922381][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 10:25:42][350091124922381][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:25:42][350091124922381][388 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:25:42][350091124922381][388 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 10:25:42][350091124922381][388 ms][DEBUG] rawBody.length=1160 [2025-08-22 10:25:42][350091124922381][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091124922381\",\"model\":\"SM-X200\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW504823N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2847\"}'\'' -e'"" [2025-08-22 10:25:42][350091124922381][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:25:42][350091124922381][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091124922381\",\"model\":\"SM-X200\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YW504823N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2847\"}'\'' -e'"" [2025-08-22 10:25:46][350091124922381][4669 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_752120b3-c995-4efc-b70d-57246f2b42e3","id":"QR_752120b3-c995-4efc-b70d-57246f2b42e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:25:47][350091124922381][4825 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3152 [2025-08-22 10:25:47][350091124922381][4825 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-22 10:25:47][350091124922381][4825 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:28:08][354747957696618][0 ms][INFO] === Request start === [2025-08-22 10:28:08][354747957696618][1 ms][DEBUG] START check_scloud [2025-08-22 10:28:08][354747957696618][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:28:09][354747957696618][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 746 4994 24698072 216676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:28:09][354747957696618][253 ms][DEBUG] targetPkg: running [2025-08-22 10:28:09][354747957696618][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-22 10:28:09][354747957696618][253 ms][DEBUG] START check_boot_completed [2025-08-22 10:28:09][354747957696618][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:28:09][354747957696618][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:28:09][354747957696618][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:28:09][354747957696618][348 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 10:28:09][354747957696618][348 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 10:28:09][354747957696618][348 ms][DEBUG] START check_internet [2025-08-22 10:28:09][354747957696618][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:28:09][354747957696618][940 ms][DEBUG] SU: done in 592 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=255 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 255.092/255.092/255.092/0.000 ms\n [2025-08-22 10:28:09][354747957696618][940 ms][DEBUG] check_internet: online [2025-08-22 10:28:09][354747957696618][940 ms][DEBUG] END check_internet in 592 ms [2025-08-22 10:28:09][354747957696618][940 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:28:09][354747957696618][940 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957696618\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60TQC6R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2502\"}'\'' -e'"" [2025-08-22 10:28:09][354747957696618][940 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:28:09][354747957696618][940 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747957696618\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60TQC6R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2502\"}'\'' -e'"" [2025-08-22 10:28:14][354747957696618][5158 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_210e8796-e5fe-4bad-8f71-74ba44c44acb","id":"QR_210e8796-e5fe-4bad-8f71-74ba44c44acb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:28:14][354747957696618][5314 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3152 [2025-08-22 10:28:14][354747957696618][5314 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-22 10:28:14][354747957696618][5314 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:29:10][351978520169428][0 ms][INFO] === Request start === [2025-08-22 10:29:10][351978520169428][0 ms][DEBUG] START check_scloud [2025-08-22 10:29:10][351978520169428][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:29:11][351978520169428][312 ms][DEBUG] SU: done in 312 ms; outu0_a118 746 4994 24850876 228468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:29:11][351978520169428][312 ms][DEBUG] targetPkg: running [2025-08-22 10:29:11][351978520169428][312 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 10:29:11][351978520169428][312 ms][DEBUG] START check_boot_completed [2025-08-22 10:29:11][351978520169428][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:29:11][351978520169428][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:29:11][351978520169428][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:29:11][351978520169428][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:29:11][351978520169428][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:29:11][351978520169428][406 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:29:11][351978520169428][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520169428\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8T70JLMXM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2640\"}'\'' -e'"" [2025-08-22 10:29:11][351978520169428][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:29:11][351978520169428][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978520169428\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8T70JLMXM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2640\"}'\'' -e'"" [2025-08-22 10:29:15][351978520169428][4873 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b965ca05-b1e6-4601-b85c-a9ceff885464","id":"QR_b965ca05-b1e6-4601-b85c-a9ceff885464","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:29:15][351978520169428][5029 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3152 [2025-08-22 10:29:15][351978520169428][5030 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-08-22 10:29:15][351978520169428][5030 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:34:06][354130546096303][1 ms][INFO] === Request start === [2025-08-22 10:34:06][354130546096303][2 ms][DEBUG] START check_scloud [2025-08-22 10:34:06][354130546096303][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:34:07][354130546096303][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 746 4994 25001636 240336 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:34:07][354130546096303][313 ms][DEBUG] targetPkg: running [2025-08-22 10:34:07][354130546096303][313 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 10:34:07][354130546096303][313 ms][DEBUG] START check_boot_completed [2025-08-22 10:34:07][354130546096303][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:34:07][354130546096303][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 10:34:07][354130546096303][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:34:07][354130546096303][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:34:07][354130546096303][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 10:34:07][354130546096303][391 ms][DEBUG] START check_internet [2025-08-22 10:34:07][354130546096303][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:34:07][354130546096303][891 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.944/199.944/199.944/0.000 ms\n [2025-08-22 10:34:07][354130546096303][891 ms][DEBUG] check_internet: online [2025-08-22 10:34:07][354130546096303][891 ms][DEBUG] END check_internet in 500 ms [2025-08-22 10:34:07][354130546096303][891 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:34:07][354130546096303][891 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130546096303\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X9074WVE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2132\"}'\'' -e'"" [2025-08-22 10:34:07][354130546096303][891 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:34:07][354130546096303][892 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130546096303\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X9074WVE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2132\"}'\'' -e'"" [2025-08-22 10:34:11][354130546096303][4672 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=89 [2025-08-22 10:34:11][354130546096303][4672 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-22 10:34:11][354130546096303][4672 ms][WARN] Detected error: Process with pid 746 either refused to load frida-agent, or terminated during injection [2025-08-22 10:34:11][354130546096303][4672 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 10:34:11][354130546096303][4828 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 10:34:11][354130546096303][4828 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 10:34:11][354130546096303][4828 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 10:34:11][354130546096303][4968 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 10:34:11][354130546096303][4968 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 10:34:11][354130546096303][5124 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 10:34:13][354130546096303][7139 ms][DEBUG] START check_boot_completed [2025-08-22 10:34:13][354130546096303][7139 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:34:14][354130546096303][7186 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:34:14][354130546096303][7187 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:34:14][354130546096303][7249 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:34:14][354130546096303][7249 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 10:34:17][354130546096303][10264 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 10:34:17][354130546096303][10264 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354130546096303\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X9074WVE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2132\"}'\'' -e'"" [2025-08-22 10:34:21][354130546096303][14294 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4632488-f4fa-4590-85d2-4b87bfc14ae7","id":"QR_f4632488-f4fa-4590-85d2-4b87bfc14ae7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:34:21][354130546096303][14450 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3152 [2025-08-22 10:34:21][354130546096303][14450 ms][DEBUG] END runCmdUntilRes#2 in 4187 ms [2025-08-22 10:34:21][354130546096303][14450 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:37:06][355680655201242][1 ms][INFO] === Request start === [2025-08-22 10:37:06][355680655201242][2 ms][DEBUG] START check_scloud [2025-08-22 10:37:06][355680655201242][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:37:06][355680655201242][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 2778 4994 23629188 126180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:37:06][355680655201242][311 ms][DEBUG] targetPkg: running [2025-08-22 10:37:06][355680655201242][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 10:37:06][355680655201242][311 ms][DEBUG] START check_boot_completed [2025-08-22 10:37:06][355680655201242][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:37:06][355680655201242][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:37:06][355680655201242][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:37:06][355680655201242][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:37:06][355680655201242][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 10:37:06][355680655201242][421 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:37:06][355680655201242][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680655201242\",\"model\":\"SM-S921B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX404TJZE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2252\"}'\'' -e'"" [2025-08-22 10:37:06][355680655201242][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:37:06][355680655201242][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355680655201242\",\"model\":\"SM-S921B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX404TJZE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2252\"}'\'' -e'"" [2025-08-22 10:37:10][355680655201242][4716 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0fa0cdbf-adf9-46e6-a0b6-377f54250861","id":"QR_0fa0cdbf-adf9-46e6-a0b6-377f54250861","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:37:10][355680655201242][4872 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3152 [2025-08-22 10:37:10][355680655201242][4872 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-22 10:37:10][355680655201242][4872 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:38:06][352288963839753][0 ms][INFO] === Request start === [2025-08-22 10:38:06][352288963839753][1 ms][DEBUG] START check_scloud [2025-08-22 10:38:06][352288963839753][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:38:06][352288963839753][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 2778 4994 23761192 136928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:38:06][352288963839753][272 ms][DEBUG] targetPkg: running [2025-08-22 10:38:06][352288963839753][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-22 10:38:06][352288963839753][272 ms][DEBUG] START check_boot_completed [2025-08-22 10:38:06][352288963839753][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:38:06][352288963839753][318 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:38:06][352288963839753][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:38:06][352288963839753][412 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 10:38:06][352288963839753][412 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 10:38:06][352288963839753][412 ms][DEBUG] START check_internet [2025-08-22 10:38:06][352288963839753][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:38:06][352288963839753][913 ms][DEBUG] SU: done in 501 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.666/202.666/202.666/0.000 ms\n [2025-08-22 10:38:06][352288963839753][913 ms][DEBUG] check_internet: online [2025-08-22 10:38:06][352288963839753][913 ms][DEBUG] END check_internet in 501 ms [2025-08-22 10:38:06][352288963839753][913 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:38:06][352288963839753][913 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963839753\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T51BWXBA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6655\"}'\'' -e'"" [2025-08-22 10:38:06][352288963839753][913 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:38:06][352288963839753][913 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288963839753\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T51BWXBA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6655\"}'\'' -e'"" [2025-08-22 10:38:10][352288963839753][4958 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0af22339-a7ee-4252-babb-45fd8725a99d","id":"QR_0af22339-a7ee-4252-babb-45fd8725a99d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:38:11][352288963839753][5114 ms][DEBUG] proc_open done in 4200 ms; code=255; res.len=3152 [2025-08-22 10:38:11][352288963839753][5114 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-22 10:38:11][352288963839753][5114 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:38:38][355355256904136][0 ms][INFO] === Request start === [2025-08-22 10:38:38][355355256904136][1 ms][DEBUG] START check_scloud [2025-08-22 10:38:38][355355256904136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:38:38][355355256904136][273 ms][DEBUG] SU: done in 271 ms; outu0_a118 2778 4994 23911948 148924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:38:38][355355256904136][273 ms][DEBUG] targetPkg: running [2025-08-22 10:38:38][355355256904136][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-22 10:38:38][355355256904136][273 ms][DEBUG] START check_boot_completed [2025-08-22 10:38:38][355355256904136][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:38:38][355355256904136][319 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:38:38][355355256904136][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:38:38][355355256904136][367 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 10:38:38][355355256904136][368 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 10:38:38][355355256904136][368 ms][DEBUG] START check_internet [2025-08-22 10:38:38][355355256904136][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:38:38][355355256904136][772 ms][DEBUG] SU: done in 404 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=283 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 283.109/283.109/283.109/0.000 ms\n [2025-08-22 10:38:38][355355256904136][772 ms][DEBUG] check_internet: online [2025-08-22 10:38:38][355355256904136][772 ms][DEBUG] END check_internet in 405 ms [2025-08-22 10:38:38][355355256904136][772 ms][DEBUG] rawBody.length=1160 [2025-08-22 10:38:38][355355256904136][772 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355256904136\",\"model\":\"SM-X205\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9PTB1HYZJF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7764\"}'\'' -e'"" [2025-08-22 10:38:38][355355256904136][772 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:38:38][355355256904136][772 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355355256904136\",\"model\":\"SM-X205\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9PTB1HYZJF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7764\"}'\'' -e'"" [2025-08-22 10:38:43][355355256904136][4849 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c7695b5-4836-44d2-a689-9fee9d58f54f","id":"QR_9c7695b5-4836-44d2-a689-9fee9d58f54f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:38:43][355355256904136][5005 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3152 [2025-08-22 10:38:43][355355256904136][5005 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-22 10:38:43][355355256904136][5005 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:40:08][354715950604368][1 ms][INFO] === Request start === [2025-08-22 10:40:08][354715950604368][2 ms][DEBUG] START check_scloud [2025-08-22 10:40:08][354715950604368][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:40:08][354715950604368][261 ms][DEBUG] SU: done in 259 ms; outu0_a118 2778 4994 24065804 160228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:40:08][354715950604368][261 ms][DEBUG] targetPkg: running [2025-08-22 10:40:08][354715950604368][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-22 10:40:08][354715950604368][261 ms][DEBUG] START check_boot_completed [2025-08-22 10:40:08][354715950604368][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:40:08][354715950604368][308 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:40:08][354715950604368][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:40:08][354715950604368][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:40:08][354715950604368][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:40:08][354715950604368][355 ms][DEBUG] START check_internet [2025-08-22 10:40:08][354715950604368][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:40:08][354715950604368][683 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=127 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 127.243/127.243/127.243/0.000 ms\n [2025-08-22 10:40:08][354715950604368][683 ms][DEBUG] check_internet: online [2025-08-22 10:40:08][354715950604368][683 ms][DEBUG] END check_internet in 328 ms [2025-08-22 10:40:08][354715950604368][683 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:40:08][354715950604368][683 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715950604368\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X90FQEXK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1123\"}'\'' -e'"" [2025-08-22 10:40:08][354715950604368][683 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:40:08][354715950604368][683 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354715950604368\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X90FQEXK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1123\"}'\'' -e'"" [2025-08-22 10:40:13][354715950604368][5260 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8a6697e6-2021-42ae-bff5-c6a36f77736f","id":"QR_8a6697e6-2021-42ae-bff5-c6a36f77736f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:40:13][354715950604368][5416 ms][DEBUG] proc_open done in 4732 ms; code=255; res.len=3152 [2025-08-22 10:40:13][354715950604368][5416 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-08-22 10:40:13][354715950604368][5416 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:40:33][351477979197923][0 ms][INFO] === Request start === [2025-08-22 10:40:33][351477979197923][1 ms][DEBUG] START check_scloud [2025-08-22 10:40:33][351477979197923][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:40:33][351477979197923][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 2778 4994 24230772 171312 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:40:33][351477979197923][284 ms][DEBUG] targetPkg: running [2025-08-22 10:40:33][351477979197923][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-22 10:40:33][351477979197923][284 ms][DEBUG] START check_boot_completed [2025-08-22 10:40:33][351477979197923][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:40:33][351477979197923][330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:40:33][351477979197923][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:40:34][351477979197923][408 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 10:40:34][351477979197923][408 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 10:40:34][351477979197923][408 ms][DEBUG] START check_internet [2025-08-22 10:40:34][351477979197923][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:40:34][351477979197923][674 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=163 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 163.174/163.174/163.174/0.000 ms\n [2025-08-22 10:40:34][351477979197923][674 ms][DEBUG] check_internet: online [2025-08-22 10:40:34][351477979197923][674 ms][DEBUG] END check_internet in 266 ms [2025-08-22 10:40:34][351477979197923][674 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:40:34][351477979197923][674 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979197923\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC09Y0FX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6749\"}'\'' -e'"" [2025-08-22 10:40:34][351477979197923][674 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:40:34][351477979197923][674 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979197923\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC09Y0FX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6749\"}'\'' -e'"" [2025-08-22 10:40:38][351477979197923][4798 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cc7f1196-516a-4849-8219-d19002794d78","id":"QR_cc7f1196-516a-4849-8219-d19002794d78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:40:38][351477979197923][4954 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 10:40:38][351477979197923][4954 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 10:40:38][351477979197923][4954 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:43:33][353936442781058][1 ms][INFO] === Request start === [2025-08-22 10:43:33][353936442781058][2 ms][DEBUG] START check_scloud [2025-08-22 10:43:33][353936442781058][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:43:33][353936442781058][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 2778 4994 24356824 183388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:43:33][353936442781058][302 ms][DEBUG] targetPkg: running [2025-08-22 10:43:33][353936442781058][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 10:43:33][353936442781058][302 ms][DEBUG] START check_boot_completed [2025-08-22 10:43:33][353936442781058][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:43:33][353936442781058][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 10:43:33][353936442781058][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:43:33][353936442781058][380 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:43:33][353936442781058][380 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 10:43:33][353936442781058][380 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:43:33][353936442781058][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353936442781058\",\"model\":\"SM-F741B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX71NLJ6T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7558\"}'\'' -e'"" [2025-08-22 10:43:33][353936442781058][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:43:33][353936442781058][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353936442781058\",\"model\":\"SM-F741B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX71NLJ6T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7558\"}'\'' -e'"" [2025-08-22 10:43:38][353936442781058][4551 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2705a444-5b01-4955-8fe5-9f22981dcd0e","id":"QR_2705a444-5b01-4955-8fe5-9f22981dcd0e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:43:38][353936442781058][4707 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3152 [2025-08-22 10:43:38][353936442781058][4707 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-08-22 10:43:38][353936442781058][4707 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:44:08][351234162192850][0 ms][INFO] === Request start === [2025-08-22 10:44:08][351234162192850][1 ms][DEBUG] START check_scloud [2025-08-22 10:44:08][351234162192850][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:44:08][351234162192850][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 2778 4994 24526012 194540 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:44:08][351234162192850][317 ms][DEBUG] targetPkg: running [2025-08-22 10:44:08][351234162192850][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 10:44:08][351234162192850][317 ms][DEBUG] START check_boot_completed [2025-08-22 10:44:08][351234162192850][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:44:08][351234162192850][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:44:08][351234162192850][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:44:08][351234162192850][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:44:08][351234162192850][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 10:44:08][351234162192850][411 ms][DEBUG] START check_internet [2025-08-22 10:44:08][351234162192850][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:44:08][351234162192850][723 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=195 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 195.984/195.984/195.984/0.000 ms\n [2025-08-22 10:44:08][351234162192850][723 ms][DEBUG] check_internet: online [2025-08-22 10:44:08][351234162192850][723 ms][DEBUG] END check_internet in 312 ms [2025-08-22 10:44:08][351234162192850][724 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:44:08][351234162192850][724 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234162192850\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX304JJKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8343\"}'\'' -e'"" [2025-08-22 10:44:08][351234162192850][724 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:44:08][351234162192850][724 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234162192850\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX304JJKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8343\"}'\'' -e'"" [2025-08-22 10:44:12][351234162192850][4566 ms][DEBUG] frida res:res:{"code":5000300,"message":"DEVICE_OPERATION_EXCEPTION","data":"Response from uploadDevicesToServiceFromKdms was empty"}\r\n [2025-08-22 10:44:12][351234162192850][4722 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=119 [2025-08-22 10:44:12][351234162192850][4722 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-22 10:44:12][351234162192850][4722 ms][INFO] SUCCESS response from frida (len=119) [2025-08-22 10:44:13][][0 ms][INFO] === Request start === [2025-08-22 10:44:13][][1 ms][DEBUG] START check_scloud [2025-08-22 10:44:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:44:13][][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 2778 4994 24654148 206168 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:44:13][][257 ms][DEBUG] targetPkg: running [2025-08-22 10:44:13][][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-22 10:44:13][][257 ms][DEBUG] START check_boot_completed [2025-08-22 10:44:13][][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:44:13][][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:44:13][][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:44:13][][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:44:13][][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:44:13][][350 ms][DEBUG] START check_internet [2025-08-22 10:44:13][][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:44:13][][647 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.064/144.064/144.064/0.000 ms\n [2025-08-22 10:44:13][][647 ms][DEBUG] check_internet: online [2025-08-22 10:44:13][][647 ms][DEBUG] END check_internet in 297 ms [2025-08-22 10:44:13][][647 ms][DEBUG] rawBody.length=1131 [2025-08-22 10:44:13][][647 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX304JJKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9099\"}'\'' -e'"" [2025-08-22 10:44:13][][647 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:44:13][][647 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX304JJKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9099\"}'\'' -e'"" [2025-08-22 10:44:17][][3990 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 10:44:17][][4146 ms][DEBUG] proc_open done in 3499 ms; code=255; res.len=107 [2025-08-22 10:44:17][][4146 ms][DEBUG] END runCmdUntilRes#1 in 3499 ms [2025-08-22 10:44:17][][4146 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 10:44:17][][0 ms][INFO] === Request start === [2025-08-22 10:44:17][][1 ms][DEBUG] START check_scloud [2025-08-22 10:44:17][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:44:17][][222 ms][DEBUG] SU: done in 221 ms; outu0_a118 2778 4994 24835276 216500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:44:17][][222 ms][DEBUG] targetPkg: running [2025-08-22 10:44:17][][222 ms][DEBUG] END check_scloud in 221 ms [2025-08-22 10:44:17][][222 ms][DEBUG] START check_boot_completed [2025-08-22 10:44:17][][222 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:44:17][][269 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:44:17][][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:44:18][][315 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:44:18][][315 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:44:18][][315 ms][DEBUG] START check_internet [2025-08-22 10:44:18][][315 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:44:18][][550 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.653/141.653/141.653/0.000 ms\n [2025-08-22 10:44:18][][550 ms][DEBUG] check_internet: online [2025-08-22 10:44:18][][550 ms][DEBUG] END check_internet in 235 ms [2025-08-22 10:44:18][][550 ms][DEBUG] rawBody.length=1131 [2025-08-22 10:44:18][][550 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX304JJKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6431\"}'\'' -e'"" [2025-08-22 10:44:18][][550 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:44:18][][550 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX304JJKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6431\"}'\'' -e'"" [2025-08-22 10:44:21][][4018 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 10:44:21][][4174 ms][DEBUG] proc_open done in 3623 ms; code=255; res.len=107 [2025-08-22 10:44:21][][4174 ms][DEBUG] END runCmdUntilRes#1 in 3624 ms [2025-08-22 10:44:21][][4174 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 10:44:24][351234162192850][0 ms][INFO] === Request start === [2025-08-22 10:44:24][351234162192850][1 ms][DEBUG] START check_scloud [2025-08-22 10:44:24][351234162192850][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:44:24][351234162192850][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 2778 4994 24992212 228064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:44:24][351234162192850][307 ms][DEBUG] targetPkg: running [2025-08-22 10:44:24][351234162192850][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 10:44:24][351234162192850][307 ms][DEBUG] START check_boot_completed [2025-08-22 10:44:24][351234162192850][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:44:24][351234162192850][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:44:24][351234162192850][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:44:24][351234162192850][417 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 10:44:24][351234162192850][417 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 10:44:24][351234162192850][417 ms][DEBUG] START check_internet [2025-08-22 10:44:24][351234162192850][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:44:24][351234162192850][713 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=188 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 188.214/188.214/188.214/0.000 ms\n [2025-08-22 10:44:24][351234162192850][713 ms][DEBUG] check_internet: online [2025-08-22 10:44:24][351234162192850][713 ms][DEBUG] END check_internet in 296 ms [2025-08-22 10:44:24][351234162192850][713 ms][DEBUG] rawBody.length=1160 [2025-08-22 10:44:24][351234162192850][713 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234162192850\",\"model\":\"SM-A556B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX304JJKH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2486\"}'\'' -e'"" [2025-08-22 10:44:24][351234162192850][713 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:44:24][351234162192850][713 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351234162192850\",\"model\":\"SM-A556B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX304JJKH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2486\"}'\'' -e'"" [2025-08-22 10:44:30][351234162192850][6274 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf7d96ea-8a3b-44bb-973a-58945b80ab95","id":"QR_cf7d96ea-8a3b-44bb-973a-58945b80ab95","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:44:30][351234162192850][6430 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3152 [2025-08-22 10:44:30][351234162192850][6430 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-22 10:44:30][351234162192850][6430 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:45:09][356415593219231][0 ms][INFO] === Request start === [2025-08-22 10:45:09][356415593219231][1 ms][DEBUG] START check_scloud [2025-08-22 10:45:09][356415593219231][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:45:10][356415593219231][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 2778 4994 25097676 240248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:45:10][356415593219231][310 ms][DEBUG] targetPkg: running [2025-08-22 10:45:10][356415593219231][311 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 10:45:10][356415593219231][311 ms][DEBUG] START check_boot_completed [2025-08-22 10:45:10][356415593219231][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:45:10][356415593219231][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:45:10][356415593219231][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:45:10][356415593219231][451 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 10:45:10][356415593219231][451 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-22 10:45:10][356415593219231][451 ms][DEBUG] rawBody.length=1160 [2025-08-22 10:45:10][356415593219231][451 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356415593219231\",\"model\":\"SM-F721U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT807X2CY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6569\"}'\'' -e'"" [2025-08-22 10:45:10][356415593219231][452 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:45:10][356415593219231][452 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356415593219231\",\"model\":\"SM-F721U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT807X2CY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6569\"}'\'' -e'"" [2025-08-22 10:45:14][356415593219231][4200 ms][DEBUG] proc_open done in 3748 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 10:45:14][356415593219231][4200 ms][DEBUG] END runCmdUntilRes#1 in 3748 ms [2025-08-22 10:45:14][356415593219231][4200 ms][WARN] Detected error: Process with pid 2778 either refused to load frida-agent, or terminated during injection [2025-08-22 10:45:14][356415593219231][4200 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 10:45:14][356415593219231][4341 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 10:45:14][356415593219231][4341 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 10:45:14][356415593219231][4341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 10:45:14][356415593219231][4466 ms][DEBUG] SU: done in 124 ms; out [2025-08-22 10:45:14][356415593219231][4466 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 10:45:14][356415593219231][4622 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 10:45:16][356415593219231][6637 ms][DEBUG] START check_boot_completed [2025-08-22 10:45:16][356415593219231][6637 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:45:16][356415593219231][6684 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:45:16][356415593219231][6684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:45:16][356415593219231][6746 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 10:45:16][356415593219231][6746 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 10:45:19][356415593219231][9761 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 10:45:19][356415593219231][9761 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356415593219231\",\"model\":\"SM-F721U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT807X2CY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6569\"}'\'' -e'"" [2025-08-22 10:45:25][356415593219231][15244 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f3df687-f8b5-4519-91c4-45b1596e5c06","id":"QR_3f3df687-f8b5-4519-91c4-45b1596e5c06","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:45:25][356415593219231][15400 ms][DEBUG] proc_open done in 5639 ms; code=255; res.len=3152 [2025-08-22 10:45:25][356415593219231][15401 ms][DEBUG] END runCmdUntilRes#2 in 5640 ms [2025-08-22 10:45:25][356415593219231][15401 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:45:49][353497470818486][1 ms][INFO] === Request start === [2025-08-22 10:45:49][353497470818486][1 ms][DEBUG] START check_scloud [2025-08-22 10:45:49][353497470818486][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:45:49][353497470818486][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 4294 4994 23601076 126776 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:45:49][353497470818486][303 ms][DEBUG] targetPkg: running [2025-08-22 10:45:49][353497470818486][303 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 10:45:49][353497470818486][303 ms][DEBUG] START check_boot_completed [2025-08-22 10:45:49][353497470818486][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:45:49][353497470818486][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:45:49][353497470818486][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:45:49][353497470818486][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:45:49][353497470818486][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:45:49][353497470818486][396 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:45:49][353497470818486][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497470818486\",\"model\":\"SM-S921B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX102H33K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8774\"}'\'' -e'"" [2025-08-22 10:45:49][353497470818486][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:45:49][353497470818486][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497470818486\",\"model\":\"SM-S921B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX102H33K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8774\"}'\'' -e'"" [2025-08-22 10:45:54][353497470818486][4536 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_eba59aaa-29e7-4802-85c5-0661cb87b7b2","id":"QR_eba59aaa-29e7-4802-85c5-0661cb87b7b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:45:54][353497470818486][4692 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3152 [2025-08-22 10:45:54][353497470818486][4692 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-22 10:45:54][353497470818486][4692 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:46:00][350100284337619][0 ms][INFO] === Request start === [2025-08-22 10:46:00][350100284337619][1 ms][DEBUG] START check_scloud [2025-08-22 10:46:00][350100284337619][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:46:00][350100284337619][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 4294 4994 23781756 137508 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:46:00][350100284337619][322 ms][DEBUG] targetPkg: running [2025-08-22 10:46:00][350100284337619][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-22 10:46:00][350100284337619][322 ms][DEBUG] START check_boot_completed [2025-08-22 10:46:00][350100284337619][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:46:00][350100284337619][369 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:46:00][350100284337619][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:46:01][350100284337619][416 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:46:01][350100284337619][416 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:46:01][350100284337619][416 ms][DEBUG] START check_internet [2025-08-22 10:46:01][350100284337619][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:46:01][350100284337619][853 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.448/201.448/201.448/0.000 ms\n [2025-08-22 10:46:01][350100284337619][853 ms][DEBUG] check_internet: online [2025-08-22 10:46:01][350100284337619][853 ms][DEBUG] END check_internet in 437 ms [2025-08-22 10:46:01][350100284337619][853 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:46:01][350100284337619][853 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284337619\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY138MK1A\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1191\"}'\'' -e'"" [2025-08-22 10:46:01][350100284337619][853 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:46:01][350100284337619][853 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100284337619\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY138MK1A\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1191\"}'\'' -e'"" [2025-08-22 10:46:05][350100284337619][4680 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83580cb6-40c6-4d52-8333-52affc5f0131","id":"QR_83580cb6-40c6-4d52-8333-52affc5f0131","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:46:05][350100284337619][4836 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3152 [2025-08-22 10:46:05][350100284337619][4837 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-22 10:46:05][350100284337619][4837 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:47:34][350900921345564][1 ms][INFO] === Request start === [2025-08-22 10:47:34][350900921345564][2 ms][DEBUG] START check_scloud [2025-08-22 10:47:34][350900921345564][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:47:34][350900921345564][302 ms][DEBUG] SU: done in 300 ms; outu0_a118 4294 4994 23909708 149172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:47:34][350900921345564][302 ms][DEBUG] targetPkg: running [2025-08-22 10:47:34][350900921345564][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 10:47:34][350900921345564][302 ms][DEBUG] START check_boot_completed [2025-08-22 10:47:34][350900921345564][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:47:34][350900921345564][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:47:34][350900921345564][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:47:34][350900921345564][397 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 10:47:34][350900921345564][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 10:47:34][350900921345564][397 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:47:34][350900921345564][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900921345564\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XA0G6KPY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1366\"}'\'' -e'"" [2025-08-22 10:47:34][350900921345564][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:47:34][350900921345564][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900921345564\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XA0G6KPY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1366\"}'\'' -e'"" [2025-08-22 10:47:38][350900921345564][4754 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_36da3196-3ca5-4f2d-99a8-c71a1383dbd7","id":"QR_36da3196-3ca5-4f2d-99a8-c71a1383dbd7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:47:38][350900921345564][4910 ms][DEBUG] proc_open done in 4513 ms; code=255; res.len=3152 [2025-08-22 10:47:38][350900921345564][4910 ms][DEBUG] END runCmdUntilRes#1 in 4513 ms [2025-08-22 10:47:38][350900921345564][4910 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:49:06][352455981152291][1 ms][INFO] === Request start === [2025-08-22 10:49:06][352455981152291][2 ms][DEBUG] START check_scloud [2025-08-22 10:49:06][352455981152291][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:49:06][352455981152291][276 ms][DEBUG] SU: done in 274 ms; outu0_a118 4294 4994 24025392 159992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:49:06][352455981152291][276 ms][DEBUG] targetPkg: running [2025-08-22 10:49:06][352455981152291][276 ms][DEBUG] END check_scloud in 275 ms [2025-08-22 10:49:06][352455981152291][276 ms][DEBUG] START check_boot_completed [2025-08-22 10:49:06][352455981152291][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:49:06][352455981152291][323 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 10:49:06][352455981152291][323 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:49:06][352455981152291][385 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 10:49:06][352455981152291][386 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 10:49:06][352455981152291][386 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:49:06][352455981152291][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352455981152291\",\"model\":\"SM-G781N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN90RK9AY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7817\"}'\'' -e'"" [2025-08-22 10:49:06][352455981152291][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:49:06][352455981152291][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352455981152291\",\"model\":\"SM-G781N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CN90RK9AY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7817\"}'\'' -e'"" [2025-08-22 10:49:10][352455981152291][4619 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76418fc0-6f24-4280-9509-5423bd9020ce","id":"QR_76418fc0-6f24-4280-9509-5423bd9020ce","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:49:10][352455981152291][4775 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3152 [2025-08-22 10:49:10][352455981152291][4775 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-22 10:49:10][352455981152291][4775 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:49:17][351877472431317][0 ms][INFO] === Request start === [2025-08-22 10:49:17][351877472431317][1 ms][DEBUG] START check_scloud [2025-08-22 10:49:17][351877472431317][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:49:17][351877472431317][265 ms][DEBUG] SU: done in 264 ms; outu0_a118 4294 4994 24160944 171844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:49:17][351877472431317][265 ms][DEBUG] targetPkg: running [2025-08-22 10:49:17][351877472431317][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-22 10:49:17][351877472431317][265 ms][DEBUG] START check_boot_completed [2025-08-22 10:49:17][351877472431317][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:49:17][351877472431317][309 ms][DEBUG] ADB: done in 44 ms; out [2025-08-22 10:49:17][351877472431317][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:49:17][351877472431317][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:49:17][351877472431317][356 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 10:49:17][351877472431317][356 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:49:17][351877472431317][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472431317\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W20E7GLV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4706\"}'\'' -e'"" [2025-08-22 10:49:17][351877472431317][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:49:17][351877472431317][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351877472431317\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W20E7GLV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4706\"}'\'' -e'"" [2025-08-22 10:49:21][351877472431317][4293 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_037bed43-6e6f-4a70-b99f-cd4e5a95c3ee","id":"QR_037bed43-6e6f-4a70-b99f-cd4e5a95c3ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:49:21][351877472431317][4449 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3152 [2025-08-22 10:49:21][351877472431317][4449 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-22 10:49:21][351877472431317][4449 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:50:09][353628423798892][1 ms][INFO] === Request start === [2025-08-22 10:50:09][353628423798892][2 ms][DEBUG] START check_scloud [2025-08-22 10:50:09][353628423798892][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:50:09][353628423798892][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 4294 4994 24254324 182972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:50:09][353628423798892][310 ms][DEBUG] targetPkg: running [2025-08-22 10:50:09][353628423798892][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 10:50:09][353628423798892][311 ms][DEBUG] START check_boot_completed [2025-08-22 10:50:09][353628423798892][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:50:09][353628423798892][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:50:09][353628423798892][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:50:09][353628423798892][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:50:09][353628423798892][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 10:50:09][353628423798892][404 ms][DEBUG] START check_internet [2025-08-22 10:50:09][353628423798892][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:50:09][353628423798892][841 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.069/201.069/201.069/0.000 ms\n [2025-08-22 10:50:09][353628423798892][841 ms][DEBUG] check_internet: online [2025-08-22 10:50:09][353628423798892][842 ms][DEBUG] END check_internet in 438 ms [2025-08-22 10:50:09][353628423798892][842 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:50:09][353628423798892][842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628423798892\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8X10BWK2N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6082\"}'\'' -e'"" [2025-08-22 10:50:09][353628423798892][842 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:50:09][353628423798892][842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353628423798892\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8X10BWK2N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6082\"}'\'' -e'"" [2025-08-22 10:50:14][353628423798892][5075 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_835e1478-c014-4cfe-8792-34b37bd67db3","id":"QR_835e1478-c014-4cfe-8792-34b37bd67db3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:50:14][353628423798892][5231 ms][DEBUG] proc_open done in 4389 ms; code=255; res.len=3152 [2025-08-22 10:50:14][353628423798892][5231 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-22 10:50:14][353628423798892][5231 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:54:07][357642299792117][1 ms][INFO] === Request start === [2025-08-22 10:54:07][357642299792117][2 ms][DEBUG] START check_scloud [2025-08-22 10:54:07][357642299792117][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:54:08][357642299792117][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 4294 4994 24392664 195332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:54:08][357642299792117][305 ms][DEBUG] targetPkg: running [2025-08-22 10:54:08][357642299792117][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 10:54:08][357642299792117][305 ms][DEBUG] START check_boot_completed [2025-08-22 10:54:08][357642299792117][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:54:08][357642299792117][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 10:54:08][357642299792117][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:54:08][357642299792117][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 10:54:08][357642299792117][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 10:54:08][357642299792117][399 ms][DEBUG] START check_internet [2025-08-22 10:54:08][357642299792117][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:54:08][357642299792117][789 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=240 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 240.532/240.532/240.532/0.000 ms\n [2025-08-22 10:54:08][357642299792117][789 ms][DEBUG] check_internet: online [2025-08-22 10:54:08][357642299792117][789 ms][DEBUG] END check_internet in 390 ms [2025-08-22 10:54:08][357642299792117][789 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:54:08][357642299792117][789 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357642299792117\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TA0D1AMD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2305\"}'\'' -e'"" [2025-08-22 10:54:08][357642299792117][789 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:54:08][357642299792117][789 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357642299792117\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TA0D1AMD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ATS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2305\"}'\'' -e'"" [2025-08-22 10:54:12][357642299792117][4882 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7776ae3c-56ee-410a-a6f0-9ba28ab2d34b","id":"QR_7776ae3c-56ee-410a-a6f0-9ba28ab2d34b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:54:12][357642299792117][5038 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 10:54:12][357642299792117][5038 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-22 10:54:12][357642299792117][5038 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 10:54:18][354529380287391][0 ms][INFO] === Request start === [2025-08-22 10:54:18][354529380287391][1 ms][DEBUG] START check_scloud [2025-08-22 10:54:18][354529380287391][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 10:54:18][354529380287391][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 4294 4994 24545376 206192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 10:54:18][354529380287391][310 ms][DEBUG] targetPkg: running [2025-08-22 10:54:18][354529380287391][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 10:54:18][354529380287391][310 ms][DEBUG] START check_boot_completed [2025-08-22 10:54:18][354529380287391][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 10:54:18][354529380287391][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 10:54:18][354529380287391][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 10:54:19][354529380287391][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 10:54:19][354529380287391][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 10:54:19][354529380287391][388 ms][DEBUG] START check_internet [2025-08-22 10:54:19][354529380287391][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 10:54:19][354529380287391][888 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.727/202.727/202.727/0.000 ms\n [2025-08-22 10:54:19][354529380287391][888 ms][DEBUG] check_internet: online [2025-08-22 10:54:19][354529380287391][888 ms][DEBUG] END check_internet in 500 ms [2025-08-22 10:54:19][354529380287391][888 ms][DEBUG] rawBody.length=1161 [2025-08-22 10:54:19][354529380287391][888 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529380287391\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8T804R1EM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4557\"}'\'' -e'"" [2025-08-22 10:54:19][354529380287391][888 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 10:54:19][354529380287391][888 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354529380287391\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8T804R1EM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4557\"}'\'' -e'"" [2025-08-22 10:54:23][354529380287391][4512 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51a9ac72-c9f8-4dd1-9954-bd0a5e4e45ca","id":"QR_51a9ac72-c9f8-4dd1-9954-bd0a5e4e45ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 10:54:23][354529380287391][4668 ms][DEBUG] proc_open done in 3780 ms; code=255; res.len=3152 [2025-08-22 10:54:23][354529380287391][4668 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-22 10:54:23][354529380287391][4668 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:00:09][353249726385178][1 ms][INFO] === Request start === [2025-08-22 11:00:09][353249726385178][2 ms][DEBUG] START check_scloud [2025-08-22 11:00:09][353249726385178][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:00:09][353249726385178][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 4294 4994 24671456 217584 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:00:09][353249726385178][307 ms][DEBUG] targetPkg: running [2025-08-22 11:00:09][353249726385178][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 11:00:09][353249726385178][307 ms][DEBUG] START check_boot_completed [2025-08-22 11:00:09][353249726385178][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:00:09][353249726385178][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:00:09][353249726385178][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:00:09][353249726385178][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 11:00:09][353249726385178][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 11:00:09][353249726385178][417 ms][DEBUG] START check_internet [2025-08-22 11:00:09][353249726385178][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:00:09][353249726385178][932 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.978/201.978/201.978/0.000 ms\n [2025-08-22 11:00:09][353249726385178][932 ms][DEBUG] check_internet: online [2025-08-22 11:00:09][353249726385178][932 ms][DEBUG] END check_internet in 515 ms [2025-08-22 11:00:09][353249726385178][932 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:00:09][353249726385178][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249726385178\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58RC4M5CWW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6166\"}'\'' -e'"" [2025-08-22 11:00:09][353249726385178][932 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:00:09][353249726385178][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353249726385178\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58RC4M5CWW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6166\"}'\'' -e'"" [2025-08-22 11:00:14][353249726385178][5462 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_73cdf80a-096f-451a-8838-b8bc63df060d","id":"QR_73cdf80a-096f-451a-8838-b8bc63df060d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:00:14][353249726385178][5618 ms][DEBUG] proc_open done in 4686 ms; code=255; res.len=3152 [2025-08-22 11:00:14][353249726385178][5618 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-22 11:00:14][353249726385178][5618 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:05:46][350637543649219][1 ms][INFO] === Request start === [2025-08-22 11:05:46][350637543649219][2 ms][DEBUG] START check_scloud [2025-08-22 11:05:46][350637543649219][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:05:46][350637543649219][251 ms][DEBUG] SU: done in 249 ms; outu0_a118 4294 4994 24827204 229748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:05:46][350637543649219][251 ms][DEBUG] targetPkg: running [2025-08-22 11:05:46][350637543649219][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 11:05:46][350637543649219][251 ms][DEBUG] START check_boot_completed [2025-08-22 11:05:46][350637543649219][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:05:46][350637543649219][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:05:46][350637543649219][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:05:46][350637543649219][392 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 11:05:46][350637543649219][392 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 11:05:46][350637543649219][392 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:05:46][350637543649219][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637543649219\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TA08JPGT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2326\"}'\'' -e'"" [2025-08-22 11:05:46][350637543649219][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:05:46][350637543649219][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637543649219\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8TA08JPGT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2326\"}'\'' -e'"" [2025-08-22 11:05:51][350637543649219][4828 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a69c6504-e162-4600-bd10-3afab42a09f4","id":"QR_a69c6504-e162-4600-bd10-3afab42a09f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:05:51][350637543649219][4984 ms][DEBUG] proc_open done in 4592 ms; code=255; res.len=3152 [2025-08-22 11:05:51][350637543649219][4984 ms][DEBUG] END runCmdUntilRes#1 in 4592 ms [2025-08-22 11:05:51][350637543649219][4984 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:07:17][352674520754280][1 ms][INFO] === Request start === [2025-08-22 11:07:17][352674520754280][2 ms][DEBUG] START check_scloud [2025-08-22 11:07:17][352674520754280][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:07:17][352674520754280][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 4294 4994 24940968 240760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:07:17][352674520754280][287 ms][DEBUG] targetPkg: running [2025-08-22 11:07:17][352674520754280][287 ms][DEBUG] END check_scloud in 286 ms [2025-08-22 11:07:17][352674520754280][287 ms][DEBUG] START check_boot_completed [2025-08-22 11:07:17][352674520754280][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:07:17][352674520754280][318 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 11:07:17][352674520754280][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:07:17][352674520754280][381 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 11:07:17][352674520754280][381 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 11:07:17][352674520754280][381 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:07:17][352674520754280][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520754280\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W907WPVL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8916\"}'\'' -e'"" [2025-08-22 11:07:17][352674520754280][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:07:17][352674520754280][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520754280\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W907WPVL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8916\"}'\'' -e'"" [2025-08-22 11:07:21][352674520754280][4177 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 11:07:21][352674520754280][4177 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-22 11:07:21][352674520754280][4177 ms][WARN] Detected error: Process with pid 4294 either refused to load frida-agent, or terminated during injection [2025-08-22 11:07:21][352674520754280][4177 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 11:07:21][352674520754280][4318 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 11:07:21][352674520754280][4318 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 11:07:21][352674520754280][4318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 11:07:22][352674520754280][4474 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 11:07:22][352674520754280][4474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 11:07:22][352674520754280][4614 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 11:07:24][352674520754280][6629 ms][DEBUG] START check_boot_completed [2025-08-22 11:07:24][352674520754280][6629 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:07:24][352674520754280][6676 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:07:24][352674520754280][6676 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:07:24][352674520754280][6739 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 11:07:24][352674520754280][6739 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 11:07:27][352674520754280][9754 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 11:07:27][352674520754280][9754 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520754280\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W907WPVL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8916\"}'\'' -e'"" [2025-08-22 11:07:31][352674520754280][13768 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0625b5af-48fd-40cf-9c6e-238049bf9969","id":"QR_0625b5af-48fd-40cf-9c6e-238049bf9969","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:07:31][352674520754280][13925 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3152 [2025-08-22 11:07:31][352674520754280][13925 ms][DEBUG] END runCmdUntilRes#2 in 4171 ms [2025-08-22 11:07:31][352674520754280][13925 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:11:06][354747950451458][1 ms][INFO] === Request start === [2025-08-22 11:11:06][354747950451458][2 ms][DEBUG] START check_scloud [2025-08-22 11:11:06][354747950451458][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:11:06][354747950451458][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 6866 4994 23610404 126064 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:11:06][354747950451458][301 ms][DEBUG] targetPkg: running [2025-08-22 11:11:06][354747950451458][302 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 11:11:06][354747950451458][302 ms][DEBUG] START check_boot_completed [2025-08-22 11:11:06][354747950451458][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:11:06][354747950451458][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:11:06][354747950451458][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:11:06][354747950451458][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 11:11:06][354747950451458][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 11:11:06][354747950451458][411 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:11:06][354747950451458][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747950451458\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X50QJLHL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3759\"}'\'' -e'"" [2025-08-22 11:11:06][354747950451458][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:11:06][354747950451458][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747950451458\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X50QJLHL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3759\"}'\'' -e'"" [2025-08-22 11:11:10][354747950451458][4706 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a42a062a-526f-4751-b8e8-836624d20971","id":"QR_a42a062a-526f-4751-b8e8-836624d20971","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:11:10][354747950451458][4863 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3152 [2025-08-22 11:11:10][354747950451458][4863 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-22 11:11:10][354747950451458][4863 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:13:49][352665189091931][1 ms][INFO] === Request start === [2025-08-22 11:13:49][352665189091931][2 ms][DEBUG] START check_scloud [2025-08-22 11:13:49][352665189091931][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:13:49][352665189091931][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 6866 4994 23743744 137380 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:13:49][352665189091931][306 ms][DEBUG] targetPkg: running [2025-08-22 11:13:49][352665189091931][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 11:13:49][352665189091931][306 ms][DEBUG] START check_boot_completed [2025-08-22 11:13:50][352665189091931][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:13:50][352665189091931][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:13:50][352665189091931][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:13:50][352665189091931][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 11:13:50][352665189091931][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 11:13:50][352665189091931][416 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:13:50][352665189091931][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189091931\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X71A9Z4B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8514\"}'\'' -e'"" [2025-08-22 11:13:50][352665189091931][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:13:50][352665189091931][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189091931\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X71A9Z4B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8514\"}'\'' -e'"" [2025-08-22 11:13:54][352665189091931][4555 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_29c5dff7-9b18-4b5c-8ef8-0fc601893f65","id":"QR_29c5dff7-9b18-4b5c-8ef8-0fc601893f65","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:13:54][352665189091931][4711 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3152 [2025-08-22 11:13:54][352665189091931][4711 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-22 11:13:54][352665189091931][4711 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:15:07][351642486691318][1 ms][INFO] === Request start === [2025-08-22 11:15:07][351642486691318][2 ms][DEBUG] START check_scloud [2025-08-22 11:15:07][351642486691318][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:15:07][351642486691318][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 6866 4994 23896356 149472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:15:07][351642486691318][316 ms][DEBUG] targetPkg: running [2025-08-22 11:15:07][351642486691318][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 11:15:07][351642486691318][316 ms][DEBUG] START check_boot_completed [2025-08-22 11:15:07][351642486691318][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:15:07][351642486691318][363 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:15:07][351642486691318][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:15:07][351642486691318][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:15:07][351642486691318][410 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 11:15:07][351642486691318][410 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:15:07][351642486691318][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486691318\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X50EADSW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4776\"}'\'' -e'"" [2025-08-22 11:15:07][351642486691318][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:15:07][351642486691318][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642486691318\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X50EADSW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4776\"}'\'' -e'"" [2025-08-22 11:15:11][351642486691318][4315 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_802d8fcc-c6d4-466a-8469-30586641f62f","id":"QR_802d8fcc-c6d4-466a-8469-30586641f62f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:15:11][351642486691318][4471 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3152 [2025-08-22 11:15:11][351642486691318][4471 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-22 11:15:11][351642486691318][4471 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:17:17][350621810542430][1 ms][INFO] === Request start === [2025-08-22 11:17:17][350621810542430][2 ms][DEBUG] START check_scloud [2025-08-22 11:17:17][350621810542430][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:17:17][350302230700714][0 ms][INFO] === Request start === [2025-08-22 11:17:17][350621810542430][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 6866 4994 24011272 160624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:17:17][350621810542430][312 ms][DEBUG] targetPkg: running [2025-08-22 11:17:17][350621810542430][312 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 11:17:17][350621810542430][312 ms][DEBUG] START check_boot_completed [2025-08-22 11:17:17][350621810542430][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:17:18][350621810542430][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:17:18][350621810542430][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:17:18][350621810542430][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:17:18][350621810542430][405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 11:17:18][350621810542430][406 ms][DEBUG] rawBody.length=1160 [2025-08-22 11:17:18][350621810542430][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350621810542430\",\"model\":\"SM-F916W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CR10GLA3X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6045\"}'\'' -e'"" [2025-08-22 11:17:18][350621810542430][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:17:18][350621810542430][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350621810542430\",\"model\":\"SM-F916W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R3CR10GLA3X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6045\"}'\'' -e'"" [2025-08-22 11:17:25][350621810542430][7560 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d1ba2fa-55ba-4043-9f04-61987c904f17","id":"QR_5d1ba2fa-55ba-4043-9f04-61987c904f17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:17:25][350621810542430][7716 ms][DEBUG] proc_open done in 7310 ms; code=255; res.len=3152 [2025-08-22 11:17:25][350621810542430][7716 ms][DEBUG] END runCmdUntilRes#1 in 7310 ms [2025-08-22 11:17:25][350621810542430][7716 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:17:25][350302230700714][8112 ms][DEBUG] START check_scloud [2025-08-22 11:17:25][350302230700714][8112 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:17:26][350302230700714][8410 ms][DEBUG] SU: done in 298 ms; outu0_a118 6866 4994 24170000 171136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:17:26][350302230700714][8411 ms][DEBUG] targetPkg: running [2025-08-22 11:17:26][350302230700714][8411 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 11:17:26][350302230700714][8411 ms][DEBUG] START check_boot_completed [2025-08-22 11:17:26][350302230700714][8411 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:17:26][350302230700714][8456 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 11:17:26][350302230700714][8456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:17:26][350302230700714][8503 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:17:26][350302230700714][8503 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 11:17:26][350302230700714][8503 ms][DEBUG] rawBody.length=1160 [2025-08-22 11:17:26][350302230700714][8503 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350302230700714\",\"model\":\"SM-F926W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCRC1Z9GAX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7078\"}'\'' -e'"" [2025-08-22 11:17:26][350302230700714][8503 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:17:26][350302230700714][8503 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350302230700714\",\"model\":\"SM-F926W\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCRC1Z9GAX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7078\"}'\'' -e'"" [2025-08-22 11:17:32][350302230700714][14923 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1605040-86ff-4083-96da-68dcc993534d","id":"QR_a1605040-86ff-4083-96da-68dcc993534d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:17:32][350302230700714][15079 ms][DEBUG] proc_open done in 6576 ms; code=255; res.len=3152 [2025-08-22 11:17:32][350302230700714][15079 ms][DEBUG] END runCmdUntilRes#1 in 6576 ms [2025-08-22 11:17:32][350302230700714][15080 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:22:26][350561450779431][1 ms][INFO] === Request start === [2025-08-22 11:22:26][350561450779431][2 ms][DEBUG] START check_scloud [2025-08-22 11:22:26][350561450779431][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:22:27][350561450779431][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 6866 4994 24285776 183532 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:22:27][350561450779431][303 ms][DEBUG] targetPkg: running [2025-08-22 11:22:27][350561450779431][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 11:22:27][350561450779431][304 ms][DEBUG] START check_boot_completed [2025-08-22 11:22:27][350561450779431][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:22:27][350561450779431][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:22:27][350561450779431][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:22:27][350561450779431][399 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 11:22:27][350561450779431][399 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 11:22:27][350561450779431][399 ms][DEBUG] START check_internet [2025-08-22 11:22:27][350561450779431][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:22:27][350561450779431][975 ms][DEBUG] SU: done in 576 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.499/201.499/201.499/0.000 ms\n [2025-08-22 11:22:27][350561450779431][975 ms][DEBUG] check_internet: online [2025-08-22 11:22:27][350561450779431][975 ms][DEBUG] END check_internet in 577 ms [2025-08-22 11:22:27][350561450779431][975 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:22:27][350561450779431][975 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350561450779431\",\"model\":\"SM-A156E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX700VVXX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2468\"}'\'' -e'"" [2025-08-22 11:22:27][350561450779431][975 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:22:27][350561450779431][976 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350561450779431\",\"model\":\"SM-A156E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX700VVXX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2468\"}'\'' -e'"" [2025-08-22 11:22:31][350561450779431][5021 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f713a29b-dc2b-4c00-bbc0-7fa55c0d7542","id":"QR_f713a29b-dc2b-4c00-bbc0-7fa55c0d7542","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:22:32][350561450779431][5177 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3152 [2025-08-22 11:22:32][350561450779431][5177 ms][DEBUG] END runCmdUntilRes#1 in 4201 ms [2025-08-22 11:22:32][350561450779431][5177 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:23:04][350814495707861][0 ms][INFO] === Request start === [2025-08-22 11:23:04][350814495707861][1 ms][DEBUG] START check_scloud [2025-08-22 11:23:04][350814495707861][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:23:05][350814495707861][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 6866 4994 24438452 194524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:23:05][350814495707861][303 ms][DEBUG] targetPkg: running [2025-08-22 11:23:05][350814495707861][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 11:23:05][350814495707861][303 ms][DEBUG] START check_boot_completed [2025-08-22 11:23:05][350814495707861][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:23:05][350814495707861][350 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:23:05][350814495707861][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:23:05][350814495707861][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 11:23:05][350814495707861][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 11:23:05][350814495707861][412 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:23:05][350814495707861][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495707861\",\"model\":\"SM-M156B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY3273XHR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1239\"}'\'' -e'"" [2025-08-22 11:23:05][350814495707861][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:23:05][350814495707861][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350814495707861\",\"model\":\"SM-M156B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY3273XHR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1239\"}'\'' -e'"" [2025-08-22 11:23:09][350814495707861][4396 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_78487a24-dbfc-417c-b8d0-e9e96ed4f49a","id":"QR_78487a24-dbfc-417c-b8d0-e9e96ed4f49a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:23:09][350814495707861][4552 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3152 [2025-08-22 11:23:09][350814495707861][4552 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-22 11:23:09][350814495707861][4552 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:26:35][350142322086675][1 ms][INFO] === Request start === [2025-08-22 11:26:35][350142322086675][2 ms][DEBUG] START check_scloud [2025-08-22 11:26:35][350142322086675][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:26:36][350142322086675][274 ms][DEBUG] SU: done in 272 ms; outu0_a118 6866 4994 24587160 206488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:26:36][350142322086675][274 ms][DEBUG] targetPkg: running [2025-08-22 11:26:36][350142322086675][274 ms][DEBUG] END check_scloud in 272 ms [2025-08-22 11:26:36][350142322086675][274 ms][DEBUG] START check_boot_completed [2025-08-22 11:26:36][350142322086675][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:26:36][350142322086675][320 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:26:36][350142322086675][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:26:36][350142322086675][398 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 11:26:36][350142322086675][398 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 11:26:36][350142322086675][398 ms][DEBUG] START check_internet [2025-08-22 11:26:36][350142322086675][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:26:36][350142322086675][867 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.394/201.394/201.394/0.000 ms\n [2025-08-22 11:26:36][350142322086675][867 ms][DEBUG] check_internet: online [2025-08-22 11:26:36][350142322086675][867 ms][DEBUG] END check_internet in 469 ms [2025-08-22 11:26:36][350142322086675][867 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:26:36][350142322086675][867 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142322086675\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y70D9QGZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2112\"}'\'' -e'"" [2025-08-22 11:26:36][350142322086675][867 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:26:36][350142322086675][867 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350142322086675\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y70D9QGZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2112\"}'\'' -e'"" [2025-08-22 11:26:44][350142322086675][8787 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8f05046-3f24-4566-944a-3613b7aa12a1","id":"QR_e8f05046-3f24-4566-944a-3613b7aa12a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:26:44][350142322086675][8943 ms][DEBUG] proc_open done in 8076 ms; code=255; res.len=3152 [2025-08-22 11:26:44][350142322086675][8943 ms][DEBUG] END runCmdUntilRes#1 in 8076 ms [2025-08-22 11:26:44][350142322086675][8943 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:31:38][357712352498124][1 ms][INFO] === Request start === [2025-08-22 11:31:38][357712352498124][2 ms][DEBUG] START check_scloud [2025-08-22 11:31:38][357712352498124][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:31:38][357712352498124][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 6866 4994 24727548 217660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:31:38][357712352498124][307 ms][DEBUG] targetPkg: running [2025-08-22 11:31:38][357712352498124][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 11:31:38][357712352498124][307 ms][DEBUG] START check_boot_completed [2025-08-22 11:31:38][357712352498124][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:31:38][357712352498124][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:31:38][357712352498124][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:31:38][357712352498124][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:31:38][357712352498124][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 11:31:38][357712352498124][401 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:31:38][357712352498124][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712352498124\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W40S6YPK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1548\"}'\'' -e'"" [2025-08-22 11:31:38][357712352498124][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:31:38][357712352498124][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357712352498124\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W40S6YPK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1548\"}'\'' -e'"" [2025-08-22 11:31:43][357712352498124][4868 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d138e9ab-fc21-4fd4-83b3-928a3fd59591","id":"QR_d138e9ab-fc21-4fd4-83b3-928a3fd59591","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:31:43][357712352498124][5024 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3152 [2025-08-22 11:31:43][357712352498124][5025 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-08-22 11:31:43][357712352498124][5025 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:35:34][350938280663490][1 ms][INFO] === Request start === [2025-08-22 11:35:34][350938280663490][2 ms][DEBUG] START check_scloud [2025-08-22 11:35:34][350938280663490][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:35:35][350938280663490][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 6866 4994 24876256 228964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:35:35][350938280663490][304 ms][DEBUG] targetPkg: running [2025-08-22 11:35:35][350938280663490][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 11:35:35][350938280663490][304 ms][DEBUG] START check_boot_completed [2025-08-22 11:35:35][350938280663490][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:35:35][350938280663490][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:35:35][350938280663490][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:35:35][350938280663490][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 11:35:35][350938280663490][398 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 11:35:35][350938280663490][398 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:35:35][350938280663490][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280663490\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58XB0RQVBR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9063\"}'\'' -e'"" [2025-08-22 11:35:35][350938280663490][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:35:35][350938280663490][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280663490\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58XB0RQVBR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9063\"}'\'' -e'"" [2025-08-22 11:35:39][350938280663490][4615 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cda06952-b259-4f16-b7b2-4f924f41e3a9","id":"QR_cda06952-b259-4f16-b7b2-4f924f41e3a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:35:39][350938280663490][4771 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3152 [2025-08-22 11:35:39][350938280663490][4771 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-22 11:35:39][350938280663490][4771 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:39:06][352674520173507][1 ms][INFO] === Request start === [2025-08-22 11:39:06][352674520173507][2 ms][DEBUG] START check_scloud [2025-08-22 11:39:06][352674520173507][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:39:06][352674520173507][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 6866 4994 25028028 240800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:39:06][352674520173507][284 ms][DEBUG] targetPkg: running [2025-08-22 11:39:06][352674520173507][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-22 11:39:06][352674520173507][285 ms][DEBUG] START check_boot_completed [2025-08-22 11:39:06][352674520173507][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:39:06][352674520173507][331 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:39:06][352674520173507][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:39:06][352674520173507][396 ms][DEBUG] SU: done in 65 ms; out [2025-08-22 11:39:06][352674520173507][396 ms][DEBUG] END check_boot_completed in 112 ms [2025-08-22 11:39:06][352674520173507][396 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:39:06][352674520173507][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520173507\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W60CZCJW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3409\"}'\'' -e'"" [2025-08-22 11:39:06][352674520173507][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:39:06][352674520173507][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520173507\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W60CZCJW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3409\"}'\'' -e'"" [2025-08-22 11:39:10][352674520173507][4299 ms][DEBUG] proc_open done in 3902 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 11:39:10][352674520173507][4299 ms][DEBUG] END runCmdUntilRes#1 in 3903 ms [2025-08-22 11:39:10][352674520173507][4299 ms][WARN] Detected error: Process with pid 6866 either refused to load frida-agent, or terminated during injection [2025-08-22 11:39:10][352674520173507][4299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 11:39:10][352674520173507][4455 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 11:39:10][352674520173507][4455 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 11:39:10][352674520173507][4455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 11:39:10][352674520173507][4580 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 11:39:10][352674520173507][4580 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 11:39:10][352674520173507][4768 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 11:39:12][352674520173507][6783 ms][DEBUG] START check_boot_completed [2025-08-22 11:39:12][352674520173507][6783 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:39:12][352674520173507][6830 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:39:12][352674520173507][6830 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:39:13][352674520173507][6908 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 11:39:13][352674520173507][6908 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 11:39:16][352674520173507][9922 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 11:39:16][352674520173507][9923 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352674520173507\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W60CZCJW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3409\"}'\'' -e'"" [2025-08-22 11:39:20][352674520173507][14078 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa67b96f-c6b8-46e5-9d3a-fc23439bf487","id":"QR_fa67b96f-c6b8-46e5-9d3a-fc23439bf487","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:39:20][352674520173507][14234 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3152 [2025-08-22 11:39:20][352674520173507][14234 ms][DEBUG] END runCmdUntilRes#2 in 4312 ms [2025-08-22 11:39:20][352674520173507][14234 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:45:09][355088851965182][1 ms][INFO] === Request start === [2025-08-22 11:45:09][355088851965182][2 ms][DEBUG] START check_scloud [2025-08-22 11:45:09][355088851965182][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:45:10][355088851965182][289 ms][DEBUG] SU: done in 287 ms; outu0_a118 8974 4994 23634852 126196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:45:10][355088851965182][289 ms][DEBUG] targetPkg: running [2025-08-22 11:45:10][355088851965182][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-22 11:45:10][355088851965182][289 ms][DEBUG] START check_boot_completed [2025-08-22 11:45:10][355088851965182][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:45:10][355088851965182][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:45:10][355088851965182][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:45:10][355088851965182][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 11:45:10][355088851965182][398 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 11:45:10][355088851965182][398 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:45:10][355088851965182][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088851965182\",\"model\":\"SM-A256B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX9007VKE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7710\"}'\'' -e'"" [2025-08-22 11:45:10][355088851965182][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:45:10][355088851965182][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088851965182\",\"model\":\"SM-A256B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX9007VKE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7710\"}'\'' -e'"" [2025-08-22 11:45:19][355088851965182][9943 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b263456b-a4df-480b-a33e-51733eded256","id":"QR_b263456b-a4df-480b-a33e-51733eded256","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:45:20][355088851965182][10099 ms][DEBUG] proc_open done in 9701 ms; code=255; res.len=3152 [2025-08-22 11:45:20][355088851965182][10099 ms][DEBUG] END runCmdUntilRes#1 in 9701 ms [2025-08-22 11:45:20][355088851965182][10099 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:46:06][351642485796001][0 ms][INFO] === Request start === [2025-08-22 11:46:06][351642485796001][1 ms][DEBUG] START check_scloud [2025-08-22 11:46:06][351642485796001][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:46:07][351642485796001][237 ms][DEBUG] SU: done in 236 ms; outu0_a118 8974 4994 23798536 137040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:46:07][351642485796001][238 ms][DEBUG] targetPkg: running [2025-08-22 11:46:07][351642485796001][238 ms][DEBUG] END check_scloud in 236 ms [2025-08-22 11:46:07][351642485796001][238 ms][DEBUG] START check_boot_completed [2025-08-22 11:46:07][351642485796001][238 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:46:07][351642485796001][269 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 11:46:07][351642485796001][269 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:46:07][351642485796001][316 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:46:07][351642485796001][316 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 11:46:07][351642485796001][316 ms][DEBUG] START check_internet [2025-08-22 11:46:07][351642485796001][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:46:07][351642485796001][786 ms][DEBUG] SU: done in 470 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.468/202.468/202.468/0.000 ms\n [2025-08-22 11:46:07][351642485796001][786 ms][DEBUG] check_internet: online [2025-08-22 11:46:07][351642485796001][786 ms][DEBUG] END check_internet in 470 ms [2025-08-22 11:46:07][351642485796001][786 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:46:07][351642485796001][786 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485796001\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5080XHV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4010\"}'\'' -e'"" [2025-08-22 11:46:07][351642485796001][786 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:46:07][351642485796001][786 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642485796001\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X5080XHV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4010\"}'\'' -e'"" [2025-08-22 11:46:11][351642485796001][4924 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f2e4d704-b4c2-41fa-a5ee-9045d02169dd","id":"QR_f2e4d704-b4c2-41fa-a5ee-9045d02169dd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:46:11][351642485796001][5080 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3152 [2025-08-22 11:46:11][351642485796001][5080 ms][DEBUG] END runCmdUntilRes#1 in 4294 ms [2025-08-22 11:46:11][351642485796001][5080 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:48:07][353243882110264][1 ms][INFO] === Request start === [2025-08-22 11:48:07][353243882110264][2 ms][DEBUG] START check_scloud [2025-08-22 11:48:07][353243882110264][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:48:07][353243882110264][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 8974 4994 23940972 148872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:48:07][353243882110264][306 ms][DEBUG] targetPkg: running [2025-08-22 11:48:07][353243882110264][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 11:48:07][353243882110264][306 ms][DEBUG] START check_boot_completed [2025-08-22 11:48:07][353243882110264][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:48:07][353243882110264][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:48:07][353243882110264][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:48:07][353243882110264][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 11:48:07][353243882110264][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 11:48:07][353243882110264][416 ms][DEBUG] START check_internet [2025-08-22 11:48:07][353243882110264][416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:48:08][353243882110264][868 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=299 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 299.727/299.727/299.727/0.000 ms\n [2025-08-22 11:48:08][353243882110264][869 ms][DEBUG] check_internet: online [2025-08-22 11:48:08][353243882110264][869 ms][DEBUG] END check_internet in 453 ms [2025-08-22 11:48:08][353243882110264][869 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:48:08][353243882110264][869 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243882110264\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T71CGJ3X\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5367\"}'\'' -e'"" [2025-08-22 11:48:08][353243882110264][869 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:48:08][353243882110264][869 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353243882110264\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T71CGJ3X\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5367\"}'\'' -e'"" [2025-08-22 11:48:12][353243882110264][5055 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf7b09f4-8652-4fb4-b6dc-a56423002308","id":"QR_bf7b09f4-8652-4fb4-b6dc-a56423002308","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:48:12][353243882110264][5211 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3152 [2025-08-22 11:48:12][353243882110264][5211 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-22 11:48:12][353243882110264][5211 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:48:18][357267560239877][1 ms][INFO] === Request start === [2025-08-22 11:48:18][357267560239877][2 ms][DEBUG] START check_scloud [2025-08-22 11:48:18][357267560239877][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:48:18][357267560239877][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 8974 4994 24081460 159736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:48:18][357267560239877][303 ms][DEBUG] targetPkg: running [2025-08-22 11:48:18][357267560239877][303 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 11:48:18][357267560239877][303 ms][DEBUG] START check_boot_completed [2025-08-22 11:48:18][357267560239877][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:48:18][357267560239877][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 11:48:18][357267560239877][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:48:18][357267560239877][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:48:18][357267560239877][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 11:48:18][357267560239877][381 ms][DEBUG] START check_internet [2025-08-22 11:48:18][357267560239877][381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:48:18][357267560239877][678 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=184 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 184.622/184.622/184.622/0.000 ms\n [2025-08-22 11:48:18][357267560239877][678 ms][DEBUG] check_internet: online [2025-08-22 11:48:18][357267560239877][678 ms][DEBUG] END check_internet in 297 ms [2025-08-22 11:48:18][357267560239877][678 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:48:18][357267560239877][678 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357267560239877\",\"model\":\"SM-G990E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW61KFT8M\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9094\"}'\'' -e'"" [2025-08-22 11:48:18][357267560239877][678 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:48:18][357267560239877][678 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357267560239877\",\"model\":\"SM-G990E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW61KFT8M\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9094\"}'\'' -e'"" [2025-08-22 11:48:23][357267560239877][4724 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_859966bb-6e36-4236-ad61-415f001b9779","id":"QR_859966bb-6e36-4236-ad61-415f001b9779","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:48:23][357267560239877][4880 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3152 [2025-08-22 11:48:23][357267560239877][4880 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-22 11:48:23][357267560239877][4880 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:50:07][355632982780877][1 ms][INFO] === Request start === [2025-08-22 11:50:07][355632982780877][2 ms][DEBUG] START check_scloud [2025-08-22 11:50:07][355632982780877][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:50:07][355632982780877][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 8974 4994 24193268 170708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:50:07][355632982780877][292 ms][DEBUG] targetPkg: running [2025-08-22 11:50:07][355632982780877][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-22 11:50:07][355632982780877][292 ms][DEBUG] START check_boot_completed [2025-08-22 11:50:07][355632982780877][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:50:07][355632982780877][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:50:07][355632982780877][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:50:07][355632982780877][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:50:07][355632982780877][386 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 11:50:07][355632982780877][386 ms][DEBUG] START check_internet [2025-08-22 11:50:07][355632982780877][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:50:08][355632982780877][917 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.424/198.424/198.424/0.000 ms\n [2025-08-22 11:50:08][355632982780877][917 ms][DEBUG] check_internet: online [2025-08-22 11:50:08][355632982780877][918 ms][DEBUG] END check_internet in 532 ms [2025-08-22 11:50:08][355632982780877][918 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:50:08][355632982780877][918 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355632982780877\",\"model\":\"SM-A217F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8R70J97GF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4015\"}'\'' -e'"" [2025-08-22 11:50:08][355632982780877][918 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:50:08][355632982780877][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355632982780877\",\"model\":\"SM-A217F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8R70J97GF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4015\"}'\'' -e'"" [2025-08-22 11:50:12][355632982780877][5088 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8421c38d-3af4-4b23-b3ab-2e29e1c3eb89","id":"QR_8421c38d-3af4-4b23-b3ab-2e29e1c3eb89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:50:12][355632982780877][5244 ms][DEBUG] proc_open done in 4326 ms; code=255; res.len=3152 [2025-08-22 11:50:12][355632982780877][5244 ms][DEBUG] END runCmdUntilRes#1 in 4326 ms [2025-08-22 11:50:12][355632982780877][5244 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:52:06][353684146946920][1 ms][INFO] === Request start === [2025-08-22 11:52:06][353684146946920][2 ms][DEBUG] START check_scloud [2025-08-22 11:52:06][353684146946920][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:52:06][353684146946920][275 ms][DEBUG] SU: done in 273 ms; outu0_a118 8974 4994 24318452 182716 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:52:06][353684146946920][275 ms][DEBUG] targetPkg: running [2025-08-22 11:52:06][353684146946920][275 ms][DEBUG] END check_scloud in 274 ms [2025-08-22 11:52:06][353684146946920][275 ms][DEBUG] START check_boot_completed [2025-08-22 11:52:06][353684146946920][275 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:52:07][353684146946920][322 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:52:07][353684146946920][322 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:52:07][353684146946920][369 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:52:07][353684146946920][369 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 11:52:07][353684146946920][369 ms][DEBUG] START check_internet [2025-08-22 11:52:07][353684146946920][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:52:07][353684146946920][712 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=253 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 253.006/253.006/253.006/0.000 ms\n [2025-08-22 11:52:07][353684146946920][712 ms][DEBUG] check_internet: online [2025-08-22 11:52:07][353684146946920][713 ms][DEBUG] END check_internet in 344 ms [2025-08-22 11:52:07][353684146946920][713 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:52:07][353684146946920][713 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684146946920\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y70A354B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7274\"}'\'' -e'"" [2025-08-22 11:52:07][353684146946920][713 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:52:07][353684146946920][713 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684146946920\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y70A354B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7274\"}'\'' -e'"" [2025-08-22 11:52:11][353684146946920][4852 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed29a0e9-fedb-488c-8cc0-ed96a5c4bba1","id":"QR_ed29a0e9-fedb-488c-8cc0-ed96a5c4bba1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:52:11][353684146946920][5008 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3152 [2025-08-22 11:52:11][353684146946920][5008 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-22 11:52:11][353684146946920][5008 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:52:20][350547664281934][0 ms][INFO] === Request start === [2025-08-22 11:52:20][350547664281934][1 ms][DEBUG] START check_scloud [2025-08-22 11:52:20][350547664281934][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:52:20][350547664281934][254 ms][DEBUG] SU: done in 253 ms; outu0_a118 8974 4994 24489660 193640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:52:20][350547664281934][255 ms][DEBUG] targetPkg: running [2025-08-22 11:52:20][350547664281934][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-22 11:52:20][350547664281934][255 ms][DEBUG] START check_boot_completed [2025-08-22 11:52:20][350547664281934][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:52:20][350547664281934][301 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:52:20][350547664281934][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:52:20][350547664281934][379 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 11:52:20][350547664281934][379 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 11:52:20][350547664281934][379 ms][DEBUG] START check_internet [2025-08-22 11:52:20][350547664281934][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:52:20][350547664281934][692 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.156/201.156/201.156/0.000 ms\n [2025-08-22 11:52:20][350547664281934][692 ms][DEBUG] check_internet: online [2025-08-22 11:52:20][350547664281934][692 ms][DEBUG] END check_internet in 313 ms [2025-08-22 11:52:20][350547664281934][692 ms][DEBUG] rawBody.length=1160 [2025-08-22 11:52:20][350547664281934][692 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547664281934\",\"model\":\"SM-A225M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8T107G49Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8112\"}'\'' -e'"" [2025-08-22 11:52:20][350547664281934][692 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:52:20][350547664281934][692 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547664281934\",\"model\":\"SM-A225M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8T107G49Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8112\"}'\'' -e'"" [2025-08-22 11:52:26][350547664281934][6144 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74703e0d-af30-49f4-96a6-f6c9bcb929ef","id":"QR_74703e0d-af30-49f4-96a6-f6c9bcb929ef","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:52:26][350547664281934][6300 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3152 [2025-08-22 11:52:26][350547664281934][6300 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-22 11:52:26][350547664281934][6300 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:52:32][351671771937425][0 ms][INFO] === Request start === [2025-08-22 11:52:32][351671771937425][1 ms][DEBUG] START check_scloud [2025-08-22 11:52:32][351671771937425][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:52:33][351671771937425][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 8974 4994 24621856 205404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:52:33][351671771937425][262 ms][DEBUG] targetPkg: running [2025-08-22 11:52:33][351671771937425][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-22 11:52:33][351671771937425][262 ms][DEBUG] START check_boot_completed [2025-08-22 11:52:33][351671771937425][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:52:33][351671771937425][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:52:33][351671771937425][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:52:33][351671771937425][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:52:33][351671771937425][356 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 11:52:33][351671771937425][356 ms][DEBUG] START check_internet [2025-08-22 11:52:33][351671771937425][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:52:33][351671771937425][652 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=188 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 188.102/188.102/188.102/0.000 ms\n [2025-08-22 11:52:33][351671771937425][652 ms][DEBUG] check_internet: online [2025-08-22 11:52:33][351671771937425][652 ms][DEBUG] END check_internet in 297 ms [2025-08-22 11:52:33][351671771937425][652 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:52:33][351671771937425][652 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671771937425\",\"model\":\"SM-A136S\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA1CPRMM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7690\"}'\'' -e'"" [2025-08-22 11:52:33][351671771937425][653 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:52:33][351671771937425][653 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351671771937425\",\"model\":\"SM-A136S\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA1CPRMM\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7690\"}'\'' -e'"" [2025-08-22 11:52:37][351671771937425][4776 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1ad65c7c-47ab-4076-a637-70288e720b9b","id":"QR_1ad65c7c-47ab-4076-a637-70288e720b9b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:52:37][351671771937425][4933 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 11:52:37][351671771937425][4933 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 11:52:37][351671771937425][4933 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:53:07][357962507762110][0 ms][INFO] === Request start === [2025-08-22 11:53:07][357962507762110][1 ms][DEBUG] START check_scloud [2025-08-22 11:53:07][357962507762110][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:53:08][357962507762110][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 8974 4994 24722784 216284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:53:08][357962507762110][326 ms][DEBUG] targetPkg: running [2025-08-22 11:53:08][357962507762110][326 ms][DEBUG] END check_scloud in 325 ms [2025-08-22 11:53:08][357962507762110][326 ms][DEBUG] START check_boot_completed [2025-08-22 11:53:08][357962507762110][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:53:08][357962507762110][373 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:53:08][357962507762110][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:53:08][357962507762110][421 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 11:53:08][357962507762110][421 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 11:53:08][357962507762110][421 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:53:08][357962507762110][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507762110\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W90C77FD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1238\"}'\'' -e'"" [2025-08-22 11:53:08][357962507762110][422 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:53:08][357962507762110][422 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962507762110\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W90C77FD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1238\"}'\'' -e'"" [2025-08-22 11:53:12][357962507762110][4746 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b088b195-5f32-4486-b273-64275fe64abc","id":"QR_b088b195-5f32-4486-b273-64275fe64abc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:53:12][357962507762110][4903 ms][DEBUG] proc_open done in 4481 ms; code=255; res.len=3152 [2025-08-22 11:53:12][357962507762110][4903 ms][DEBUG] END runCmdUntilRes#1 in 4481 ms [2025-08-22 11:53:12][357962507762110][4903 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:53:48][357262975478459][0 ms][INFO] === Request start === [2025-08-22 11:53:48][357262975478459][1 ms][DEBUG] START check_scloud [2025-08-22 11:53:48][357262975478459][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:53:49][357262975478459][301 ms][DEBUG] SU: done in 300 ms; outu0_a118 8974 4994 24857160 228260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:53:49][357262975478459][301 ms][DEBUG] targetPkg: running [2025-08-22 11:53:49][357262975478459][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 11:53:49][357262975478459][301 ms][DEBUG] START check_boot_completed [2025-08-22 11:53:49][357262975478459][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:53:49][357262975478459][346 ms][DEBUG] ADB: done in 44 ms; out [2025-08-22 11:53:49][357262975478459][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:53:49][357262975478459][395 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 11:53:49][357262975478459][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 11:53:49][357262975478459][395 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:53:49][357262975478459][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262975478459\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX70WALTV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9763\"}'\'' -e'"" [2025-08-22 11:53:49][357262975478459][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:53:49][357262975478459][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262975478459\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX70WALTV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9763\"}'\'' -e'"" [2025-08-22 11:53:52][357262975478459][4251 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69853c3c-3dd6-4ad8-a8d2-655bbadd15f9","id":"QR_69853c3c-3dd6-4ad8-a8d2-655bbadd15f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:53:53][357262975478459][4407 ms][DEBUG] proc_open done in 4012 ms; code=255; res.len=3152 [2025-08-22 11:53:53][357262975478459][4407 ms][DEBUG] END runCmdUntilRes#1 in 4012 ms [2025-08-22 11:53:53][357262975478459][4408 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:54:06][353403930449631][0 ms][INFO] === Request start === [2025-08-22 11:54:06][353403930449631][1 ms][DEBUG] START check_scloud [2025-08-22 11:54:06][353403930449631][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:54:07][353403930449631][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 8974 4994 25030352 239072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:54:07][353403930449631][303 ms][DEBUG] targetPkg: running [2025-08-22 11:54:07][353403930449631][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 11:54:07][353403930449631][303 ms][DEBUG] START check_boot_completed [2025-08-22 11:54:07][353403930449631][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:54:07][353403930449631][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 11:54:07][353403930449631][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:54:07][353403930449631][398 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 11:54:07][353403930449631][398 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 11:54:07][353403930449631][398 ms][DEBUG] START check_internet [2025-08-22 11:54:07][353403930449631][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:54:07][353403930449631][709 ms][DEBUG] SU: done in 310 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.604/203.604/203.604/0.000 ms\n [2025-08-22 11:54:07][353403930449631][709 ms][DEBUG] check_internet: online [2025-08-22 11:54:07][353403930449631][709 ms][DEBUG] END check_internet in 311 ms [2025-08-22 11:54:07][353403930449631][709 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:54:07][353403930449631][709 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930449631\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCW902Z74J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4209\"}'\'' -e'"" [2025-08-22 11:54:07][353403930449631][709 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:54:07][353403930449631][709 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930449631\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCW902Z74J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4209\"}'\'' -e'"" [2025-08-22 11:54:15][353403930449631][8519 ms][DEBUG] proc_open done in 7810 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 11:54:15][353403930449631][8519 ms][DEBUG] END runCmdUntilRes#1 in 7811 ms [2025-08-22 11:54:15][353403930449631][8519 ms][WARN] Detected error: Process with pid 8974 either refused to load frida-agent, or terminated during injection [2025-08-22 11:54:15][353403930449631][8519 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 11:54:15][353403930449631][8691 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 11:54:15][353403930449631][8691 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 11:54:15][353403930449631][8691 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 11:54:15][353403930449631][8894 ms][DEBUG] SU: done in 203 ms; out [2025-08-22 11:54:15][353403930449631][8894 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 11:54:16][353403930449631][9160 ms][DEBUG] SU: done in 265 ms; out [2025-08-22 11:54:18][353403930449631][11175 ms][DEBUG] START check_boot_completed [2025-08-22 11:54:18][353403930449631][11175 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:54:18][353403930449631][11222 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 11:54:18][353403930449631][11222 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:54:18][353403930449631][11284 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 11:54:18][353403930449631][11284 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 11:54:21][353403930449631][14299 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 11:54:21][353403930449631][14299 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930449631\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCW902Z74J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4209\"}'\'' -e'"" [2025-08-22 11:54:22][353403930449631][15846 ms][DEBUG] proc_open done in 1547 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-22 11:54:22][353403930449631][15846 ms][DEBUG] END runCmdUntilRes#2 in 1547 ms [2025-08-22 11:54:22][353403930449631][15846 ms][WARN] Detected error 2; Reboot the device [2025-08-22 11:54:22][353403930449631][15846 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 11:54:23][353403930449631][16486 ms][DEBUG] SU: done in 640 ms; out [2025-08-22 11:54:35][353403930449631][1 ms][INFO] === Request start === [2025-08-22 11:54:35][353403930449631][2 ms][DEBUG] START check_scloud [2025-08-22 11:54:35][353403930449631][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:54:35][353403930449631][33 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 11:54:35][353403930449631][33 ms][WARN] targetPkg: not running, restarting [2025-08-22 11:54:35][353403930449631][33 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 11:54:35][353403930449631][64 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 11:54:35][353403930449631][64 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 11:54:35][353403930449631][95 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 11:54:37][353403930449631][2110 ms][DEBUG] END check_scloud in 2109 ms [2025-08-22 11:54:37][353403930449631][2110 ms][DEBUG] START check_boot_completed [2025-08-22 11:54:37][353403930449631][2110 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:55:29][353403930449631][1 ms][INFO] === Request start === [2025-08-22 11:55:29][353403930449631][2 ms][DEBUG] START check_scloud [2025-08-22 11:55:29][353403930449631][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:55:29][353403930449631][318 ms][DEBUG] SU: done in 316 ms; out [2025-08-22 11:55:29][353403930449631][318 ms][WARN] targetPkg: not running, restarting [2025-08-22 11:55:29][353403930449631][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 11:55:30][353403930449631][474 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 11:55:30][353403930449631][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 11:55:30][353403930449631][709 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 11:55:32][353403930449631][2724 ms][DEBUG] END check_scloud in 2722 ms [2025-08-22 11:55:32][353403930449631][2724 ms][DEBUG] START check_boot_completed [2025-08-22 11:55:32][353403930449631][2724 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:55:32][353403930449631][2755 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 11:55:32][353403930449631][2755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:55:32][353403930449631][2833 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 11:55:32][353403930449631][2833 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 11:55:32][353403930449631][2833 ms][DEBUG] rawBody.length=1160 [2025-08-22 11:55:32][353403930449631][2833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930449631\",\"model\":\"SM-A346E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RRCW902Z74J\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4389\"}'\'' -e'"" [2025-08-22 11:55:32][353403930449631][2834 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:55:32][353403930449631][2834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930449631\",\"model\":\"SM-A346E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RRCW902Z74J\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4389\"}'\'' -e'"" [2025-08-22 11:55:36][351912105784764][0 ms][INFO] === Request start === [2025-08-22 11:55:38][353403930449631][8535 ms][DEBUG] proc_open done in 5701 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 11:55:38][353403930449631][8535 ms][DEBUG] END runCmdUntilRes#1 in 5701 ms [2025-08-22 11:55:38][353403930449631][8535 ms][WARN] Detected error: Process not found [2025-08-22 11:55:38][353403930449631][8535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 11:55:38][353403930449631][8755 ms][DEBUG] SU: done in 219 ms; out [2025-08-22 11:55:38][353403930449631][8755 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 11:55:38][353403930449631][8755 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 11:55:38][353403930449631][9050 ms][DEBUG] SU: done in 296 ms; out [2025-08-22 11:55:38][353403930449631][9050 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 11:55:38][353403930449631][9394 ms][DEBUG] SU: done in 344 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 11:55:40][353403930449631][11409 ms][DEBUG] START check_boot_completed [2025-08-22 11:55:40][353403930449631][11409 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:55:41][353403930449631][11487 ms][DEBUG] ADB: done in 78 ms; out [2025-08-22 11:55:41][353403930449631][11487 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:55:41][353403930449631][11659 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 11:55:41][353403930449631][11659 ms][DEBUG] END check_boot_completed in 250 ms [2025-08-22 11:55:44][353403930449631][14674 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 11:55:44][353403930449631][14674 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930449631\",\"model\":\"SM-A346E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RRCW902Z74J\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XME\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4389\"}'\'' -e'"" [2025-08-22 11:55:51][353403930449631][21782 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b77fee65-57a5-4872-8806-c5c6d22e00e1","id":"QR_b77fee65-57a5-4872-8806-c5c6d22e00e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:55:51][353403930449631][21938 ms][DEBUG] proc_open done in 7264 ms; code=255; res.len=3152 [2025-08-22 11:55:51][353403930449631][21938 ms][DEBUG] END runCmdUntilRes#2 in 7264 ms [2025-08-22 11:55:51][353403930449631][21938 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:55:53][351912105784764][0 ms][INFO] === Request start === [2025-08-22 11:55:53][351912105784764][1 ms][DEBUG] START check_scloud [2025-08-22 11:55:53][351912105784764][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:55:53][351912105784764][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 8635 5013 23704244 104428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:55:53][351912105784764][313 ms][DEBUG] targetPkg: running [2025-08-22 11:55:53][351912105784764][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 11:55:53][351912105784764][313 ms][DEBUG] START check_boot_completed [2025-08-22 11:55:53][351912105784764][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:55:53][351912105784764][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 11:55:53][351912105784764][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:55:53][351912105784764][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:55:53][351912105784764][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 11:55:53][351912105784764][391 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:55:53][351912105784764][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351912105784764\",\"model\":\"SM-G973F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8MC10RPMK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"VAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5302\"}'\'' -e'"" [2025-08-22 11:55:53][351912105784764][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:55:53][351912105784764][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351912105784764\",\"model\":\"SM-G973F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8MC10RPMK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"VAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5302\"}'\'' -e'"" [2025-08-22 11:55:58][351912105784764][5280 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2349f080-9b44-4a3a-9e3e-d613ae71e15d","id":"QR_2349f080-9b44-4a3a-9e3e-d613ae71e15d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:55:58][351912105784764][5436 ms][DEBUG] proc_open done in 5046 ms; code=255; res.len=3152 [2025-08-22 11:55:58][351912105784764][5436 ms][DEBUG] END runCmdUntilRes#1 in 5046 ms [2025-08-22 11:55:58][351912105784764][5436 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:58:13][352496803523780][1 ms][INFO] === Request start === [2025-08-22 11:58:13][352496803523780][2 ms][DEBUG] START check_scloud [2025-08-22 11:58:13][352496803523780][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:58:14][352496803523780][332 ms][DEBUG] SU: done in 331 ms; outu0_a118 8635 5013 23751200 60992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:58:14][352496803523780][332 ms][DEBUG] targetPkg: running [2025-08-22 11:58:14][352496803523780][332 ms][DEBUG] END check_scloud in 331 ms [2025-08-22 11:58:14][352496803523780][333 ms][DEBUG] START check_boot_completed [2025-08-22 11:58:14][352496803523780][333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:58:14][352496803523780][393 ms][DEBUG] ADB: done in 61 ms; out [2025-08-22 11:58:14][352496803523780][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:58:14][352496803523780][440 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 11:58:14][352496803523780][440 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-22 11:58:14][352496803523780][440 ms][DEBUG] START check_internet [2025-08-22 11:58:14][352496803523780][440 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 11:58:14][352496803523780][815 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=259 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 259.713/259.713/259.713/0.000 ms\n [2025-08-22 11:58:14][352496803523780][815 ms][DEBUG] check_internet: online [2025-08-22 11:58:14][352496803523780][815 ms][DEBUG] END check_internet in 375 ms [2025-08-22 11:58:14][352496803523780][815 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:58:14][352496803523780][815 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352496803523780\",\"model\":\"SM-S916B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW92BJ1BW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7383\"}'\'' -e'"" [2025-08-22 11:58:14][352496803523780][816 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:58:14][352496803523780][816 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352496803523780\",\"model\":\"SM-S916B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW92BJ1BW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEC\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7383\"}'\'' -e'"" [2025-08-22 11:58:19][352496803523780][5533 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_85315b92-56ee-4abf-ad62-2610d04acec4","id":"QR_85315b92-56ee-4abf-ad62-2610d04acec4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:58:19][352496803523780][5689 ms][DEBUG] proc_open done in 4873 ms; code=255; res.len=3152 [2025-08-22 11:58:19][352496803523780][5689 ms][DEBUG] END runCmdUntilRes#1 in 4873 ms [2025-08-22 11:58:19][352496803523780][5689 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 11:59:05][350019154013219][0 ms][INFO] === Request start === [2025-08-22 11:59:05][350019154013219][1 ms][DEBUG] START check_scloud [2025-08-22 11:59:05][350019154013219][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 11:59:05][350019154013219][334 ms][DEBUG] SU: done in 332 ms; outu0_a118 8635 5013 23879236 77256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 11:59:05][350019154013219][334 ms][DEBUG] targetPkg: running [2025-08-22 11:59:05][350019154013219][334 ms][DEBUG] END check_scloud in 333 ms [2025-08-22 11:59:05][350019154013219][334 ms][DEBUG] START check_boot_completed [2025-08-22 11:59:05][350019154013219][334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 11:59:05][350019154013219][365 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 11:59:05][350019154013219][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 11:59:05][350019154013219][427 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 11:59:05][350019154013219][428 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 11:59:05][350019154013219][428 ms][DEBUG] rawBody.length=1161 [2025-08-22 11:59:05][350019154013219][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350019154013219\",\"model\":\"SM-A528B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CRB1R1D0F\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5183\"}'\'' -e'"" [2025-08-22 11:59:05][350019154013219][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 11:59:05][350019154013219][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350019154013219\",\"model\":\"SM-A528B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CRB1R1D0F\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5183\"}'\'' -e'"" [2025-08-22 11:59:09][350019154013219][4520 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b2ceee2a-6b04-4297-bd41-bb740c938ffd","id":"QR_b2ceee2a-6b04-4297-bd41-bb740c938ffd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 11:59:09][350019154013219][4676 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 11:59:09][350019154013219][4676 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-22 11:59:09][350019154013219][4676 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:03:12][351199558077975][1 ms][INFO] === Request start === [2025-08-22 12:03:12][351199558077975][2 ms][DEBUG] START check_scloud [2025-08-22 12:03:12][351199558077975][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:03:13][351199558077975][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 8635 5013 23982696 95740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:03:13][351199558077975][318 ms][DEBUG] targetPkg: running [2025-08-22 12:03:13][351199558077975][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 12:03:13][351199558077975][318 ms][DEBUG] START check_boot_completed [2025-08-22 12:03:13][351199558077975][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:03:13][351199558077975][349 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:03:13][351199558077975][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:03:13][351199558077975][397 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 12:03:13][351199558077975][397 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 12:03:13][351199558077975][397 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:03:13][351199558077975][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199558077975\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X90NCFHA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4280\"}'\'' -e'"" [2025-08-22 12:03:13][351199558077975][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:03:13][351199558077975][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199558077975\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X90NCFHA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4280\"}'\'' -e'"" [2025-08-22 12:03:17][351199558077975][4379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06158355-7da1-4f0a-ae7e-734c3aa9745d","id":"QR_06158355-7da1-4f0a-ae7e-734c3aa9745d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:03:17][351199558077975][4536 ms][DEBUG] proc_open done in 4138 ms; code=255; res.len=3152 [2025-08-22 12:03:17][351199558077975][4536 ms][DEBUG] END runCmdUntilRes#1 in 4138 ms [2025-08-22 12:03:17][351199558077975][4536 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:05:07][352126721757109][0 ms][INFO] === Request start === [2025-08-22 12:05:07][352126721757109][1 ms][DEBUG] START check_scloud [2025-08-22 12:05:07][352126721757109][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:05:07][352126721757109][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 8635 5013 24124620 107452 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:05:07][352126721757109][298 ms][DEBUG] targetPkg: running [2025-08-22 12:05:07][352126721757109][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 12:05:07][352126721757109][298 ms][DEBUG] START check_boot_completed [2025-08-22 12:05:07][352126721757109][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:05:07][352126721757109][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:05:07][352126721757109][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:05:07][352126721757109][407 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 12:05:07][352126721757109][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:05:07][352126721757109][407 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:05:07][352126721757109][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352126721757109\",\"model\":\"SM-G990B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT60644MN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2269\"}'\'' -e'"" [2025-08-22 12:05:07][352126721757109][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:05:07][352126721757109][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352126721757109\",\"model\":\"SM-G990B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT60644MN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2269\"}'\'' -e'"" [2025-08-22 12:05:12][352126721757109][4859 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbc4ecc5-5616-494c-971e-a484575f2bd8","id":"QR_dbc4ecc5-5616-494c-971e-a484575f2bd8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:05:12][352126721757109][5015 ms][DEBUG] proc_open done in 4608 ms; code=255; res.len=3152 [2025-08-22 12:05:12][352126721757109][5015 ms][DEBUG] END runCmdUntilRes#1 in 4608 ms [2025-08-22 12:05:12][352126721757109][5015 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:05:18][357081194672019][1 ms][INFO] === Request start === [2025-08-22 12:05:18][357081194672019][1 ms][DEBUG] START check_scloud [2025-08-22 12:05:18][357081194672019][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:05:18][357081194672019][281 ms][DEBUG] SU: done in 279 ms; outu0_a118 8635 5013 24253012 119464 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:05:18][357081194672019][281 ms][DEBUG] targetPkg: running [2025-08-22 12:05:18][357081194672019][281 ms][DEBUG] END check_scloud in 279 ms [2025-08-22 12:05:18][357081194672019][281 ms][DEBUG] START check_boot_completed [2025-08-22 12:05:18][357081194672019][281 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:05:18][357081194672019][328 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:05:18][357081194672019][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:05:18][357081194672019][390 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:05:18][357081194672019][390 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:05:18][357081194672019][390 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:05:18][357081194672019][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357081194672019\",\"model\":\"SM-T505\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TR90ZBGWF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3114\"}'\'' -e'"" [2025-08-22 12:05:18][357081194672019][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:05:18][357081194672019][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357081194672019\",\"model\":\"SM-T505\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TR90ZBGWF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3114\"}'\'' -e'"" [2025-08-22 12:05:22][357081194672019][4124 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13a23e9e-827f-4b97-a19b-71a6a766f318","id":"QR_13a23e9e-827f-4b97-a19b-71a6a766f318","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:05:22][357081194672019][4280 ms][DEBUG] proc_open done in 3889 ms; code=255; res.len=3152 [2025-08-22 12:05:22][357081194672019][4280 ms][DEBUG] END runCmdUntilRes#1 in 3889 ms [2025-08-22 12:05:22][357081194672019][4280 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:09:04][357567916340901][1 ms][INFO] === Request start === [2025-08-22 12:09:04][357567916340901][2 ms][DEBUG] START check_scloud [2025-08-22 12:09:04][357567916340901][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:09:05][357567916340901][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 8635 5013 24364820 131084 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:09:05][357567916340901][312 ms][DEBUG] targetPkg: running [2025-08-22 12:09:05][357567916340901][312 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 12:09:05][357567916340901][312 ms][DEBUG] START check_boot_completed [2025-08-22 12:09:05][357567916340901][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:09:05][357567916340901][343 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:09:05][357567916340901][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:09:05][357567916340901][389 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:09:05][357567916340901][390 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:09:05][357567916340901][390 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:09:05][357567916340901][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567916340901\",\"model\":\"SM-A256E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX504HCLX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6532\"}'\'' -e'"" [2025-08-22 12:09:05][357567916340901][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:09:05][357567916340901][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567916340901\",\"model\":\"SM-A256E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX504HCLX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6532\"}'\'' -e'"" [2025-08-22 12:09:10][357567916340901][5794 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_37d01b58-0d52-45d1-b5ed-520c44342a89","id":"QR_37d01b58-0d52-45d1-b5ed-520c44342a89","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:09:10][357567916340901][5951 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3152 [2025-08-22 12:09:10][357567916340901][5951 ms][DEBUG] END runCmdUntilRes#1 in 5561 ms [2025-08-22 12:09:10][357567916340901][5951 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:11:07][352677532432886][1 ms][INFO] === Request start === [2025-08-22 12:11:07][352677532432886][2 ms][DEBUG] START check_scloud [2025-08-22 12:11:07][352677532432886][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:11:07][352677532432886][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 8635 5013 24475512 142712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:11:07][352677532432886][313 ms][DEBUG] targetPkg: running [2025-08-22 12:11:07][352677532432886][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 12:11:07][352677532432886][313 ms][DEBUG] START check_boot_completed [2025-08-22 12:11:07][352677532432886][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:11:07][352677532432886][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:11:07][352677532432886][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:11:07][352677532432886][392 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:11:07][352677532432886][392 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 12:11:07][352677532432886][392 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:11:07][352677532432886][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532432886\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W9097ZVJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7577\"}'\'' -e'"" [2025-08-22 12:11:07][352677532432886][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:11:07][352677532432886][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532432886\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W9097ZVJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7577\"}'\'' -e'"" [2025-08-22 12:11:11][352677532432886][4547 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e235ab2-4124-4051-bd12-462e9070e14a","id":"QR_9e235ab2-4124-4051-bd12-462e9070e14a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:11:11][352677532432886][4703 ms][DEBUG] proc_open done in 4310 ms; code=255; res.len=3152 [2025-08-22 12:11:11][352677532432886][4703 ms][DEBUG] END runCmdUntilRes#1 in 4310 ms [2025-08-22 12:11:11][352677532432886][4703 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:11:18][354690573971967][0 ms][INFO] === Request start === [2025-08-22 12:11:18][354690573971967][1 ms][DEBUG] START check_scloud [2025-08-22 12:11:18][354690573971967][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:11:18][354690573971967][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 8635 5013 24636416 153724 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:11:18][354690573971967][306 ms][DEBUG] targetPkg: running [2025-08-22 12:11:18][354690573971967][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 12:11:18][354690573971967][307 ms][DEBUG] START check_boot_completed [2025-08-22 12:11:18][354690573971967][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:11:18][354690573971967][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:11:18][354690573971967][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:11:18][354690573971967][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:11:18][354690573971967][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:11:18][354690573971967][416 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:11:18][354690573971967][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690573971967\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T50Y9W5N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8507\"}'\'' -e'"" [2025-08-22 12:11:18][354690573971967][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:11:18][354690573971967][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354690573971967\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T50Y9W5N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8507\"}'\'' -e'"" [2025-08-22 12:11:22][354690573971967][4165 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_878095fb-74e0-48a0-8b56-f665665c0b03","id":"QR_878095fb-74e0-48a0-8b56-f665665c0b03","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:11:22][354690573971967][4321 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3152 [2025-08-22 12:11:22][354690573971967][4321 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-22 12:11:22][354690573971967][4321 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:11:37][358997697567324][0 ms][INFO] === Request start === [2025-08-22 12:11:37][358997697567324][1 ms][DEBUG] START check_scloud [2025-08-22 12:11:37][358997697567324][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:11:37][358997697567324][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 8635 5013 24756456 164984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:11:37][358997697567324][305 ms][DEBUG] targetPkg: running [2025-08-22 12:11:37][358997697567324][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 12:11:37][358997697567324][305 ms][DEBUG] START check_boot_completed [2025-08-22 12:11:37][358997697567324][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:11:37][358997697567324][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:11:37][358997697567324][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:11:37][358997697567324][400 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 12:11:37][358997697567324][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 12:11:37][358997697567324][400 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:11:37][358997697567324][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997697567324\",\"model\":\"SM-X200\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YWB0JTRSL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5451\"}'\'' -e'"" [2025-08-22 12:11:37][358997697567324][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:11:37][358997697567324][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997697567324\",\"model\":\"SM-X200\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YWB0JTRSL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5451\"}'\'' -e'"" [2025-08-22 12:11:41][358997697567324][3897 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 12:11:41][358997697567324][4054 ms][DEBUG] proc_open done in 3653 ms; code=255; res.len=107 [2025-08-22 12:11:41][358997697567324][4054 ms][DEBUG] END runCmdUntilRes#1 in 3654 ms [2025-08-22 12:11:41][358997697567324][4054 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 12:11:43][353248115565952][0 ms][INFO] === Request start === [2025-08-22 12:11:43][353248115565952][1 ms][DEBUG] START check_scloud [2025-08-22 12:11:43][353248115565952][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:11:43][353248115565952][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 8635 5013 24884556 176756 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:11:43][353248115565952][263 ms][DEBUG] targetPkg: running [2025-08-22 12:11:43][353248115565952][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-22 12:11:43][353248115565952][263 ms][DEBUG] START check_boot_completed [2025-08-22 12:11:43][353248115565952][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:11:43][353248115565952][310 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:11:43][353248115565952][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:11:43][353248115565952][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:11:43][353248115565952][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:11:43][353248115565952][357 ms][DEBUG] rawBody.length=1159 [2025-08-22 12:11:43][353248115565952][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353248115565952\",\"model\":\"SM-X200\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWB0JTRSL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8074\"}'\'' -e'"" [2025-08-22 12:11:43][353248115565952][357 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:11:43][353248115565952][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353248115565952\",\"model\":\"SM-X200\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWB0JTRSL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8074\"}'\'' -e'"" [2025-08-22 12:11:47][353248115565952][4668 ms][DEBUG] proc_open done in 4311 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 12:11:47][353248115565952][4668 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-22 12:11:47][353248115565952][4668 ms][WARN] Detected error: Process with pid 8635 either refused to load frida-agent, or terminated during injection [2025-08-22 12:11:47][353248115565952][4668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 12:11:48][353248115565952][4809 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 12:11:48][353248115565952][4809 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 12:11:48][353248115565952][4809 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 12:11:48][353248115565952][4934 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 12:11:48][353248115565952][4934 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 12:11:48][353248115565952][5090 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 12:11:50][353248115565952][7105 ms][DEBUG] START check_boot_completed [2025-08-22 12:11:50][353248115565952][7105 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:11:50][353248115565952][7152 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:11:50][353248115565952][7152 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:11:50][353248115565952][7199 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:11:50][353248115565952][7199 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 12:11:53][353248115565952][10214 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 12:11:53][353248115565952][10214 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353248115565952\",\"model\":\"SM-X200\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YWB0JTRSL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8074\"}'\'' -e'"" [2025-08-22 12:11:57][353248115565952][14494 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_364c1926-4169-4cf1-8bbd-6498a3ad5e8f","id":"QR_364c1926-4169-4cf1-8bbd-6498a3ad5e8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:11:57][353248115565952][14650 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3152 [2025-08-22 12:11:57][353248115565952][14650 ms][DEBUG] END runCmdUntilRes#2 in 4437 ms [2025-08-22 12:11:57][353248115565952][14650 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:15:08][351069503040735][1 ms][INFO] === Request start === [2025-08-22 12:15:08][351069503040735][2 ms][DEBUG] START check_scloud [2025-08-22 12:15:08][351069503040735][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:15:08][351069503040735][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 19506 5013 23674496 128400 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:15:08][351069503040735][309 ms][DEBUG] targetPkg: running [2025-08-22 12:15:08][351069503040735][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-22 12:15:08][351069503040735][309 ms][DEBUG] START check_boot_completed [2025-08-22 12:15:08][351069503040735][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:15:08][351069503040735][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:15:08][351069503040735][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:15:08][351069503040735][387 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:15:08][351069503040735][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:15:08][351069503040735][388 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:15:08][351069503040735][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351069503040735\",\"model\":\"SM-M536B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCW202LF8N\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6036\"}'\'' -e'"" [2025-08-22 12:15:08][351069503040735][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:15:08][351069503040735][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351069503040735\",\"model\":\"SM-M536B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCW202LF8N\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6036\"}'\'' -e'"" [2025-08-22 12:15:14][351069503040735][5823 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_45bbadfe-4abb-45dd-884d-0f0f3ae4af4a","id":"QR_45bbadfe-4abb-45dd-884d-0f0f3ae4af4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:15:14][351069503040735][5979 ms][DEBUG] proc_open done in 5591 ms; code=255; res.len=3152 [2025-08-22 12:15:14][351069503040735][5979 ms][DEBUG] END runCmdUntilRes#1 in 5591 ms [2025-08-22 12:15:14][351069503040735][5980 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:16:06][353074284648936][0 ms][INFO] === Request start === [2025-08-22 12:16:06][353074284648936][1 ms][DEBUG] START check_scloud [2025-08-22 12:16:06][353074284648936][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:16:06][353074284648936][267 ms][DEBUG] SU: done in 265 ms; outu0_a118 19506 5013 23811492 138928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:16:06][353074284648936][267 ms][DEBUG] targetPkg: running [2025-08-22 12:16:06][353074284648936][267 ms][DEBUG] END check_scloud in 266 ms [2025-08-22 12:16:06][353074284648936][267 ms][DEBUG] START check_boot_completed [2025-08-22 12:16:06][353074284648936][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:16:06][353074284648936][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:16:06][353074284648936][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:16:06][353074284648936][360 ms][DEBUG] SU: done in 46 ms; out [2025-08-22 12:16:06][353074284648936][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:16:06][353074284648936][360 ms][DEBUG] START check_internet [2025-08-22 12:16:06][353074284648936][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:16:07][353074284648936][862 ms][DEBUG] SU: done in 502 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.682/203.682/203.682/0.000 ms\n [2025-08-22 12:16:07][353074284648936][862 ms][DEBUG] check_internet: online [2025-08-22 12:16:07][353074284648936][862 ms][DEBUG] END check_internet in 502 ms [2025-08-22 12:16:07][353074284648936][862 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:16:07][353074284648936][862 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074284648936\",\"model\":\"SM-S908B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA35DRAZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7310\"}'\'' -e'"" [2025-08-22 12:16:07][353074284648936][862 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:16:07][353074284648936][862 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353074284648936\",\"model\":\"SM-S908B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA35DRAZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7310\"}'\'' -e'"" [2025-08-22 12:16:11][353074284648936][5062 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf3b9fe3-caf3-4fd1-9aa7-c50924118d6d","id":"QR_cf3b9fe3-caf3-4fd1-9aa7-c50924118d6d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:16:11][353074284648936][5218 ms][DEBUG] proc_open done in 4356 ms; code=255; res.len=3152 [2025-08-22 12:16:11][353074284648936][5218 ms][DEBUG] END runCmdUntilRes#1 in 4356 ms [2025-08-22 12:16:11][353074284648936][5218 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:16:43][353403930449631][0 ms][INFO] === Request start === [2025-08-22 12:16:43][353403930449631][1 ms][DEBUG] START check_scloud [2025-08-22 12:16:43][353403930449631][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:16:44][353403930449631][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19506 5013 23968328 150604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:16:44][353403930449631][310 ms][DEBUG] targetPkg: running [2025-08-22 12:16:44][353403930449631][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 12:16:44][353403930449631][310 ms][DEBUG] START check_boot_completed [2025-08-22 12:16:44][353403930449631][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:16:44][353403930449631][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:16:44][353403930449631][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:16:44][353403930449631][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:16:44][353403930449631][404 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 12:16:44][353403930449631][404 ms][DEBUG] START check_internet [2025-08-22 12:16:44][353403930449631][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:16:44][353403930449631][747 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=237 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 237.845/237.845/237.845/0.000 ms\n [2025-08-22 12:16:44][353403930449631][748 ms][DEBUG] check_internet: online [2025-08-22 12:16:44][353403930449631][748 ms][DEBUG] END check_internet in 344 ms [2025-08-22 12:16:44][353403930449631][748 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:16:44][353403930449631][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930449631\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCW902Z74J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2817\"}'\'' -e'"" [2025-08-22 12:16:44][353403930449631][748 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:16:44][353403930449631][748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353403930449631\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCW902Z74J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2817\"}'\'' -e'"" [2025-08-22 12:16:48][353403930449631][4449 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9dc982a6-6869-4d8e-a7ef-6e0ce3ceaa2b","id":"QR_9dc982a6-6869-4d8e-a7ef-6e0ce3ceaa2b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:16:48][353403930449631][4606 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3152 [2025-08-22 12:16:48][353403930449631][4606 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-22 12:16:48][353403930449631][4606 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:17:05][352665189851409][0 ms][INFO] === Request start === [2025-08-22 12:17:05][352665189851409][1 ms][DEBUG] START check_scloud [2025-08-22 12:17:05][352665189851409][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:17:05][352665189851409][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 19506 5013 24102636 161804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:17:05][352665189851409][307 ms][DEBUG] targetPkg: running [2025-08-22 12:17:05][352665189851409][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 12:17:05][352665189851409][307 ms][DEBUG] START check_boot_completed [2025-08-22 12:17:05][352665189851409][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:17:05][352665189851409][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:17:05][352665189851409][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:17:05][352665189851409][402 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 12:17:05][352665189851409][403 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 12:17:05][352665189851409][403 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:17:05][352665189851409][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189851409\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X8032H2Z\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6607\"}'\'' -e'"" [2025-08-22 12:17:05][352665189851409][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:17:05][352665189851409][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352665189851409\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X8032H2Z\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6607\"}'\'' -e'"" [2025-08-22 12:17:09][352665189851409][4306 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8ddb33a-dfb9-4fa6-b86e-196893ccead9","id":"QR_a8ddb33a-dfb9-4fa6-b86e-196893ccead9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:17:09][352665189851409][4462 ms][DEBUG] proc_open done in 4059 ms; code=255; res.len=3152 [2025-08-22 12:17:09][352665189851409][4462 ms][DEBUG] END runCmdUntilRes#1 in 4059 ms [2025-08-22 12:17:09][352665189851409][4462 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:18:08][351064275891696][1 ms][INFO] === Request start === [2025-08-22 12:18:08][351064275891696][2 ms][DEBUG] START check_scloud [2025-08-22 12:18:08][351064275891696][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:18:08][351064275891696][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 19506 5013 24251152 172676 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:18:08][351064275891696][306 ms][DEBUG] targetPkg: running [2025-08-22 12:18:08][351064275891696][306 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 12:18:08][351064275891696][306 ms][DEBUG] START check_boot_completed [2025-08-22 12:18:08][351064275891696][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:18:08][351064275891696][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:18:08][351064275891696][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:18:08][351064275891696][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:18:08][351064275891696][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:18:08][351064275891696][415 ms][DEBUG] START check_internet [2025-08-22 12:18:08][351064275891696][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:18:09][351064275891696][790 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.649/256.649/256.649/0.000 ms\n [2025-08-22 12:18:09][351064275891696][790 ms][DEBUG] check_internet: online [2025-08-22 12:18:09][351064275891696][790 ms][DEBUG] END check_internet in 375 ms [2025-08-22 12:18:09][351064275891696][790 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:18:09][351064275891696][790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275891696\",\"model\":\"SM-S911B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCWB1DG2MA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8185\"}'\'' -e'"" [2025-08-22 12:18:09][351064275891696][790 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:18:09][351064275891696][790 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351064275891696\",\"model\":\"SM-S911B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCWB1DG2MA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8185\"}'\'' -e'"" [2025-08-22 12:18:13][351064275891696][4835 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d14fb8e9-bf71-4d42-917a-8f74647d684b","id":"QR_d14fb8e9-bf71-4d42-917a-8f74647d684b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:18:13][351064275891696][4992 ms][DEBUG] proc_open done in 4201 ms; code=255; res.len=3152 [2025-08-22 12:18:13][351064275891696][4992 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-22 12:18:13][351064275891696][4992 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:21:07][350498054785334][1 ms][INFO] === Request start === [2025-08-22 12:21:07][350498054785334][2 ms][DEBUG] START check_scloud [2025-08-22 12:21:07][350498054785334][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:21:07][350498054785334][264 ms][DEBUG] SU: done in 262 ms; outu0_a118 19506 5013 24375092 184812 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:21:07][350498054785334][264 ms][DEBUG] targetPkg: running [2025-08-22 12:21:07][350498054785334][264 ms][DEBUG] END check_scloud in 262 ms [2025-08-22 12:21:07][350498054785334][264 ms][DEBUG] START check_boot_completed [2025-08-22 12:21:07][350498054785334][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:21:07][350498054785334][311 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:21:07][350498054785334][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:21:07][350498054785334][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:21:07][350498054785334][358 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:21:07][350498054785334][358 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:21:07][350498054785334][358 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498054785334\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTC0PYNKV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7291\"}'\'' -e'"" [2025-08-22 12:21:07][350498054785334][358 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:21:07][350498054785334][358 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350498054785334\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCTC0PYNKV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7291\"}'\'' -e'"" [2025-08-22 12:21:12][350498054785334][4981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e805ea0a-d1cf-41c1-8552-e7a3866c51e3","id":"QR_e805ea0a-d1cf-41c1-8552-e7a3866c51e3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:21:12][350498054785334][5138 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=3152 [2025-08-22 12:21:12][350498054785334][5138 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-08-22 12:21:12][350498054785334][5138 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:24:07][358997696649016][1 ms][INFO] === Request start === [2025-08-22 12:24:07][358997696649016][2 ms][DEBUG] START check_scloud [2025-08-22 12:24:07][358997696649016][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:24:07][358997696649016][290 ms][DEBUG] SU: done in 288 ms; outu0_a118 19506 5013 24525720 195488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:24:07][358997696649016][290 ms][DEBUG] targetPkg: running [2025-08-22 12:24:07][358997696649016][290 ms][DEBUG] END check_scloud in 288 ms [2025-08-22 12:24:07][358997696649016][290 ms][DEBUG] START check_boot_completed [2025-08-22 12:24:07][358997696649016][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:24:07][358997696649016][337 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:24:07][358997696649016][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:24:08][358997696649016][415 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 12:24:08][358997696649016][415 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 12:24:08][358997696649016][415 ms][DEBUG] START check_internet [2025-08-22 12:24:08][358997696649016][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:24:08][358997696649016][884 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.175/202.175/202.175/0.000 ms\n [2025-08-22 12:24:08][358997696649016][884 ms][DEBUG] check_internet: online [2025-08-22 12:24:08][358997696649016][884 ms][DEBUG] END check_internet in 469 ms [2025-08-22 12:24:08][358997696649016][884 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:24:08][358997696649016][884 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997696649016\",\"model\":\"SM-A136U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT63DEQ7P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7675\"}'\'' -e'"" [2025-08-22 12:24:08][358997696649016][884 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:24:08][358997696649016][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358997696649016\",\"model\":\"SM-A136U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT63DEQ7P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7675\"}'\'' -e'"" [2025-08-22 12:24:14][358997696649016][7272 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b8f4789-273e-4013-93ce-e7feb46cd842","id":"QR_8b8f4789-273e-4013-93ce-e7feb46cd842","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:24:15][358997696649016][7429 ms][DEBUG] proc_open done in 6544 ms; code=255; res.len=3152 [2025-08-22 12:24:15][358997696649016][7429 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-08-22 12:24:15][358997696649016][7429 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:26:06][350957911572128][1 ms][INFO] === Request start === [2025-08-22 12:26:06][350957911572128][2 ms][DEBUG] START check_scloud [2025-08-22 12:26:06][350957911572128][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:26:07][350957911572128][272 ms][DEBUG] SU: done in 270 ms; outu0_a118 19506 5013 24688636 197740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:26:07][350957911572128][272 ms][DEBUG] targetPkg: running [2025-08-22 12:26:07][350957911572128][272 ms][DEBUG] END check_scloud in 270 ms [2025-08-22 12:26:07][350957911572128][272 ms][DEBUG] START check_boot_completed [2025-08-22 12:26:07][350957911572128][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:26:07][350957911572128][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:26:07][350957911572128][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:26:07][350957911572128][380 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:26:07][350957911572128][380 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-22 12:26:07][350957911572128][380 ms][DEBUG] START check_internet [2025-08-22 12:26:07][350957911572128][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:26:07][350957911572128][911 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.743/201.743/201.743/0.000 ms\n [2025-08-22 12:26:07][350957911572128][912 ms][DEBUG] check_internet: online [2025-08-22 12:26:07][350957911572128][912 ms][DEBUG] END check_internet in 531 ms [2025-08-22 12:26:07][350957911572128][912 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:26:07][350957911572128][912 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957911572128\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW3114HWT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-08-22 12:26:07][350957911572128][912 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:26:07][350957911572128][912 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350957911572128\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW3114HWT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2297\"}'\'' -e'"" [2025-08-22 12:26:11][350957911572128][5067 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5a67ba15-44d2-4103-b7b8-98f60fd9073c","id":"QR_5a67ba15-44d2-4103-b7b8-98f60fd9073c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:26:12][350957911572128][5223 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3152 [2025-08-22 12:26:12][350957911572128][5223 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-22 12:26:12][350957911572128][5223 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:26:21][352655895029002][0 ms][INFO] === Request start === [2025-08-22 12:26:21][352655895029002][1 ms][DEBUG] START check_scloud [2025-08-22 12:26:21][352655895029002][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:26:22][352655895029002][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 19506 5013 24857732 204924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:26:22][352655895029002][297 ms][DEBUG] targetPkg: running [2025-08-22 12:26:22][352655895029002][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-22 12:26:22][352655895029002][297 ms][DEBUG] START check_boot_completed [2025-08-22 12:26:22][352655895029002][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:26:22][352655895029002][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:26:22][352655895029002][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:26:22][352655895029002][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:26:22][352655895029002][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:26:22][352655895029002][375 ms][DEBUG] START check_internet [2025-08-22 12:26:22][352655895029002][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:26:22][352655895029002][671 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.514/193.514/193.514/0.000 ms\n [2025-08-22 12:26:22][352655895029002][671 ms][DEBUG] check_internet: online [2025-08-22 12:26:22][352655895029002][671 ms][DEBUG] END check_internet in 297 ms [2025-08-22 12:26:22][352655895029002][671 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:26:22][352655895029002][671 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352655895029002\",\"model\":\"SM-A546U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCW91Q0ENR\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9293\"}'\'' -e'"" [2025-08-22 12:26:22][352655895029002][671 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:26:22][352655895029002][672 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352655895029002\",\"model\":\"SM-A546U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCW91Q0ENR\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAG\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9293\"}'\'' -e'"" [2025-08-22 12:26:27][352655895029002][5514 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93da4373-7035-4ae4-9b1d-a473e7c197ba","id":"QR_93da4373-7035-4ae4-9b1d-a473e7c197ba","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:26:27][352655895029002][5670 ms][DEBUG] proc_open done in 4999 ms; code=255; res.len=3152 [2025-08-22 12:26:27][352655895029002][5670 ms][DEBUG] END runCmdUntilRes#1 in 4999 ms [2025-08-22 12:26:27][352655895029002][5670 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:27:31][357962509163291][1 ms][INFO] === Request start === [2025-08-22 12:27:31][357962509163291][2 ms][DEBUG] START check_scloud [2025-08-22 12:27:31][357962509163291][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:27:31][357962509163291][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 19506 5013 24950472 211748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:27:31][357962509163291][307 ms][DEBUG] targetPkg: running [2025-08-22 12:27:31][357962509163291][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 12:27:31][357962509163291][307 ms][DEBUG] START check_boot_completed [2025-08-22 12:27:31][357962509163291][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:27:31][357962509163291][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:27:31][357962509163291][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:27:31][357962509163291][416 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:27:31][357962509163291][416 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:27:31][357962509163291][416 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:27:31][357962509163291][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509163291\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W90N7ETE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3378\"}'\'' -e'"" [2025-08-22 12:27:31][357962509163291][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:27:31][357962509163291][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962509163291\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W90N7ETE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3378\"}'\'' -e'"" [2025-08-22 12:27:34][358615318666438][0 ms][INFO] === Request start === [2025-08-22 12:27:35][357962509163291][4556 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dca376b4-dd81-450d-96da-065ba3c805cb","id":"QR_dca376b4-dd81-450d-96da-065ba3c805cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:27:36][357962509163291][4712 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3152 [2025-08-22 12:27:36][357962509163291][4712 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-22 12:27:36][357962509163291][4712 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:27:36][358615318666438][2030 ms][DEBUG] START check_scloud [2025-08-22 12:27:36][358615318666438][2030 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:27:36][358615318666438][2342 ms][DEBUG] SU: done in 312 ms; outu0_a118 19506 5013 25129936 222660 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:27:36][358615318666438][2342 ms][DEBUG] targetPkg: running [2025-08-22 12:27:36][358615318666438][2342 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 12:27:36][358615318666438][2342 ms][DEBUG] START check_boot_completed [2025-08-22 12:27:36][358615318666438][2342 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:27:36][358615318666438][2373 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:27:36][358615318666438][2373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:27:36][358615318666438][2420 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:27:36][358615318666438][2420 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:27:36][358615318666438][2420 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:27:36][358615318666438][2420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615318666438\",\"model\":\"SM-S711B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX506K0QN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1540\"}'\'' -e'"" [2025-08-22 12:27:36][358615318666438][2420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:27:36][358615318666438][2420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615318666438\",\"model\":\"SM-S711B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX506K0QN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1540\"}'\'' -e'"" [2025-08-22 12:27:40][358615318666438][6372 ms][DEBUG] proc_open done in 3952 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 12:27:40][358615318666438][6373 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-22 12:27:40][358615318666438][6373 ms][WARN] Detected error: Process with pid 19506 either refused to load frida-agent, or terminated during injection [2025-08-22 12:27:40][358615318666438][6373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 12:27:40][358615318666438][6513 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 12:27:40][358615318666438][6513 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 12:27:40][358615318666438][6513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 12:27:41][358615318666438][6638 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 12:27:41][358615318666438][6638 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 12:27:41][358615318666438][6795 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 12:27:43][358615318666438][8809 ms][DEBUG] START check_boot_completed [2025-08-22 12:27:43][358615318666438][8809 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:27:43][358615318666438][8856 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:27:43][358615318666438][8856 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:27:43][358615318666438][8903 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:27:43][358615318666438][8903 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 12:27:46][358615318666438][11918 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 12:27:46][358615318666438][11918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615318666438\",\"model\":\"SM-S711B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX506K0QN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1540\"}'\'' -e'"" [2025-08-22 12:27:51][358615318666438][17323 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df9e03c0-9ab1-4e90-923f-06a37ae03405","id":"QR_df9e03c0-9ab1-4e90-923f-06a37ae03405","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:27:51][358615318666438][17479 ms][DEBUG] proc_open done in 5561 ms; code=255; res.len=3152 [2025-08-22 12:27:51][358615318666438][17479 ms][DEBUG] END runCmdUntilRes#2 in 5561 ms [2025-08-22 12:27:51][358615318666438][17479 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:29:29][350471121831548][1 ms][INFO] === Request start === [2025-08-22 12:29:29][350471121831548][2 ms][DEBUG] START check_scloud [2025-08-22 12:29:29][350471121831548][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:29:30][350471121831548][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 21134 5013 23689036 127980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:29:30][350471121831548][308 ms][DEBUG] targetPkg: running [2025-08-22 12:29:30][350471121831548][308 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 12:29:30][350471121831548][308 ms][DEBUG] START check_boot_completed [2025-08-22 12:29:30][350471121831548][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:29:30][350471121831548][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:29:30][350471121831548][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:29:30][350471121831548][403 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 12:29:30][350471121831548][403 ms][DEBUG] END check_boot_completed in 96 ms [2025-08-22 12:29:30][350471121831548][403 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:29:30][350471121831548][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121831548\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX611WMPF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1175\"}'\'' -e'"" [2025-08-22 12:29:30][350471121831548][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:29:30][350471121831548][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471121831548\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX611WMPF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1175\"}'\'' -e'"" [2025-08-22 12:29:34][350471121831548][4385 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_858107f2-a22a-47f8-8beb-10d23d155390","id":"QR_858107f2-a22a-47f8-8beb-10d23d155390","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:29:34][350471121831548][4541 ms][DEBUG] proc_open done in 4137 ms; code=255; res.len=3152 [2025-08-22 12:29:34][350471121831548][4541 ms][DEBUG] END runCmdUntilRes#1 in 4137 ms [2025-08-22 12:29:34][350471121831548][4541 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:30:08][352677530389351][0 ms][INFO] === Request start === [2025-08-22 12:30:08][352677530389351][1 ms][DEBUG] START check_scloud [2025-08-22 12:30:08][352677530389351][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:30:08][352677530389351][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 21134 5013 23821156 139144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:30:08][352677530389351][313 ms][DEBUG] targetPkg: running [2025-08-22 12:30:08][352677530389351][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 12:30:08][352677530389351][314 ms][DEBUG] START check_boot_completed [2025-08-22 12:30:08][352677530389351][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:30:09][352677530389351][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:30:09][352677530389351][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:30:09][352677530389351][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:30:09][352677530389351][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 12:30:09][352677530389351][407 ms][DEBUG] START check_internet [2025-08-22 12:30:09][352677530389351][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:30:09][352677530389351][844 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.826/201.826/201.826/0.000 ms\n [2025-08-22 12:30:09][352677530389351][845 ms][DEBUG] check_internet: online [2025-08-22 12:30:09][352677530389351][845 ms][DEBUG] END check_internet in 437 ms [2025-08-22 12:30:09][352677530389351][845 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:30:09][352677530389351][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530389351\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W40AHS7T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5241\"}'\'' -e'"" [2025-08-22 12:30:09][352677530389351][845 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:30:09][352677530389351][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677530389351\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W40AHS7T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5241\"}'\'' -e'"" [2025-08-22 12:30:13][352677530389351][4843 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_64946e6d-13e6-4b26-b908-2e52d3b053f8","id":"QR_64946e6d-13e6-4b26-b908-2e52d3b053f8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:30:13][352677530389351][4999 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3152 [2025-08-22 12:30:13][352677530389351][5000 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-22 12:30:13][352677530389351][5000 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:30:35][358451326639021][0 ms][INFO] === Request start === [2025-08-22 12:30:35][358451326639021][1 ms][DEBUG] START check_scloud [2025-08-22 12:30:35][358451326639021][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:30:35][358451326639021][316 ms][DEBUG] SU: done in 316 ms; outu0_a118 21134 5013 23938184 150912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:30:35][358451326639021][316 ms][DEBUG] targetPkg: running [2025-08-22 12:30:35][358451326639021][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 12:30:35][358451326639021][317 ms][DEBUG] START check_boot_completed [2025-08-22 12:30:35][358451326639021][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:30:35][358451326639021][347 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:30:35][358451326639021][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:30:35][358451326639021][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:30:35][358451326639021][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:30:35][358451326639021][395 ms][DEBUG] START check_internet [2025-08-22 12:30:35][358451326639021][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:30:36][358451326639021][879 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.380/200.380/200.380/0.000 ms\n [2025-08-22 12:30:36][358451326639021][879 ms][DEBUG] check_internet: online [2025-08-22 12:30:36][358451326639021][879 ms][DEBUG] END check_internet in 484 ms [2025-08-22 12:30:36][358451326639021][879 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:30:36][358451326639021][879 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358451326639021\",\"model\":\"SM-M127G\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T2042GBF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2741\"}'\'' -e'"" [2025-08-22 12:30:36][358451326639021][879 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:30:36][358451326639021][879 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358451326639021\",\"model\":\"SM-M127G\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T2042GBF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2741\"}'\'' -e'"" [2025-08-22 12:30:40][358451326639021][5018 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b0e09553-8825-49d2-ad38-9e9ef85b0a76","id":"QR_b0e09553-8825-49d2-ad38-9e9ef85b0a76","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:30:40][358451326639021][5174 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3152 [2025-08-22 12:30:40][358451326639021][5175 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-22 12:30:40][358451326639021][5175 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:31:40][353238130147415][1 ms][INFO] === Request start === [2025-08-22 12:31:40][353238130147415][2 ms][DEBUG] START check_scloud [2025-08-22 12:31:40][353238130147415][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:31:40][353238130147415][374 ms][DEBUG] SU: done in 372 ms; out [2025-08-22 12:31:40][353238130147415][374 ms][WARN] targetPkg: not running, restarting [2025-08-22 12:31:40][353238130147415][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 12:31:40][353238130147415][514 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 12:31:40][353238130147415][515 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 12:31:40][353238130147415][702 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 12:31:42][353238130147415][2717 ms][DEBUG] END check_scloud in 2715 ms [2025-08-22 12:31:42][353238130147415][2717 ms][DEBUG] START check_boot_completed [2025-08-22 12:31:42][353238130147415][2717 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:31:42][353238130147415][2764 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:31:42][353238130147415][2764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:31:42][353238130147415][2842 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 12:31:42][353238130147415][2842 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 12:31:42][353238130147415][2842 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:31:42][353238130147415][2842 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3638\"}'\'' -e'"" [2025-08-22 12:31:42][353238130147415][2842 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:31:42][353238130147415][2842 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353238130147415\",\"model\":\"SM-S908N\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT22TBCDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"KOC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3638\"}'\'' -e'"" [2025-08-22 12:31:49][353238130147415][9856 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_06f89d98-5818-47ef-9363-faed2fb6edc6","id":"QR_06f89d98-5818-47ef-9363-faed2fb6edc6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:31:50][353238130147415][10012 ms][DEBUG] proc_open done in 7170 ms; code=255; res.len=3152 [2025-08-22 12:31:50][353238130147415][10012 ms][DEBUG] END runCmdUntilRes#1 in 7170 ms [2025-08-22 12:31:50][353238130147415][10012 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:31:57][351977560650438][0 ms][INFO] === Request start === [2025-08-22 12:31:57][351977560650438][1 ms][DEBUG] START check_scloud [2025-08-22 12:31:57][351977560650438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:31:57][351977560650438][344 ms][DEBUG] SU: done in 343 ms; outu0_a118 26897 22045 23818840 92736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:31:57][351977560650438][345 ms][DEBUG] targetPkg: running [2025-08-22 12:31:57][351977560650438][345 ms][DEBUG] END check_scloud in 344 ms [2025-08-22 12:31:57][351977560650438][345 ms][DEBUG] START check_boot_completed [2025-08-22 12:31:57][351977560650438][345 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:31:57][351977560650438][391 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:31:57][351977560650438][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:31:57][351977560650438][440 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 12:31:57][351977560650438][440 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 12:31:57][351977560650438][440 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:31:57][351977560650438][440 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351977560650438\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8X800DKEY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9699\"}'\'' -e'"" [2025-08-22 12:31:57][351977560650438][440 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:31:57][351977560650438][440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351977560650438\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RR8X800DKEY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9699\"}'\'' -e'"" [2025-08-22 12:32:03][351977560650438][6015 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8b5159a2-d053-4562-88cc-e4958fc29c8d","id":"QR_8b5159a2-d053-4562-88cc-e4958fc29c8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:32:03][351977560650438][6171 ms][DEBUG] proc_open done in 5731 ms; code=255; res.len=3152 [2025-08-22 12:32:03][351977560650438][6171 ms][DEBUG] END runCmdUntilRes#1 in 5731 ms [2025-08-22 12:32:03][351977560650438][6171 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:32:06][350013882941429][0 ms][INFO] === Request start === [2025-08-22 12:32:06][350013882941429][1 ms][DEBUG] START check_scloud [2025-08-22 12:32:06][350013882941429][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:32:07][350013882941429][335 ms][DEBUG] SU: done in 334 ms; outu0_a118 26897 22045 23958280 91376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:32:07][350013882941429][335 ms][DEBUG] targetPkg: running [2025-08-22 12:32:07][350013882941429][335 ms][DEBUG] END check_scloud in 334 ms [2025-08-22 12:32:07][350013882941429][335 ms][DEBUG] START check_boot_completed [2025-08-22 12:32:07][350013882941429][335 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:32:07][350013882941429][382 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:32:07][350013882941429][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:32:07][350013882941429][476 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 12:32:07][350013882941429][476 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 12:32:07][350013882941429][476 ms][DEBUG] START check_internet [2025-08-22 12:32:07][350013882941429][476 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:32:07][350013882941429][773 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=131 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 131.162/131.162/131.162/0.000 ms\n [2025-08-22 12:32:07][350013882941429][773 ms][DEBUG] check_internet: online [2025-08-22 12:32:07][350013882941429][773 ms][DEBUG] END check_internet in 297 ms [2025-08-22 12:32:07][350013882941429][773 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:32:07][350013882941429][773 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882941429\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB0ACC3D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4148\"}'\'' -e'"" [2025-08-22 12:32:07][350013882941429][773 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:32:07][350013882941429][773 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013882941429\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB0ACC3D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4148\"}'\'' -e'"" [2025-08-22 12:32:11][350013882941429][4553 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f29092e8-1d1b-4680-9021-230b3b735c73","id":"QR_f29092e8-1d1b-4680-9021-230b3b735c73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:32:11][350013882941429][4709 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3152 [2025-08-22 12:32:11][350013882941429][4709 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-22 12:32:11][350013882941429][4709 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:33:55][355060833630952][1 ms][INFO] === Request start === [2025-08-22 12:33:55][355060833630952][2 ms][DEBUG] START check_scloud [2025-08-22 12:33:55][355060833630952][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:33:55][355060833630952][328 ms][DEBUG] SU: done in 326 ms; outu0_a118 26897 22045 24004876 69216 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:33:55][355060833630952][328 ms][DEBUG] targetPkg: running [2025-08-22 12:33:55][355060833630952][328 ms][DEBUG] END check_scloud in 326 ms [2025-08-22 12:33:55][355060833630952][328 ms][DEBUG] START check_boot_completed [2025-08-22 12:33:55][355060833630952][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:33:55][355060833630952][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:33:55][355060833630952][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:33:56][355060833630952][437 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:33:56][355060833630952][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:33:56][355060833630952][437 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:33:56][355060833630952][437 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833630952\",\"model\":\"SM-A546B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8515\"}'\'' -e'"" [2025-08-22 12:33:56][355060833630952][437 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:33:56][355060833630952][437 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355060833630952\",\"model\":\"SM-A546B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX10DKVWA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8515\"}'\'' -e'"" [2025-08-22 12:34:01][355060833630952][6092 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a7e31ef-a341-452f-a5b5-81beda246760","id":"QR_9a7e31ef-a341-452f-a5b5-81beda246760","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:34:01][355060833630952][6248 ms][DEBUG] proc_open done in 5811 ms; code=255; res.len=3152 [2025-08-22 12:34:01][355060833630952][6248 ms][DEBUG] END runCmdUntilRes#1 in 5811 ms [2025-08-22 12:34:01][355060833630952][6248 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:35:06][352677532012977][0 ms][INFO] === Request start === [2025-08-22 12:35:06][352677532012977][1 ms][DEBUG] START check_scloud [2025-08-22 12:35:06][352677532012977][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:35:07][352677532012977][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 26897 22045 24157616 88248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:35:07][352677532012977][322 ms][DEBUG] targetPkg: running [2025-08-22 12:35:07][352677532012977][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-22 12:35:07][352677532012977][322 ms][DEBUG] START check_boot_completed [2025-08-22 12:35:07][352677532012977][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:35:07][352677532012977][368 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:35:07][352677532012977][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:35:07][352677532012977][415 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:35:07][352677532012977][415 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:35:07][352677532012977][415 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:35:07][352677532012977][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532012977\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W80C4T0R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4084\"}'\'' -e'"" [2025-08-22 12:35:07][352677532012977][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:35:07][352677532012977][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352677532012977\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W80C4T0R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4084\"}'\'' -e'"" [2025-08-22 12:35:11][352677532012977][4352 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c63e2f92-15b1-4191-8647-0593a14b16f3","id":"QR_c63e2f92-15b1-4191-8647-0593a14b16f3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:35:11][352677532012977][4508 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3152 [2025-08-22 12:35:11][352677532012977][4508 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-22 12:35:11][352677532012977][4508 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:35:36][358385390299512][0 ms][INFO] === Request start === [2025-08-22 12:35:36][358385390299512][1 ms][DEBUG] START check_scloud [2025-08-22 12:35:36][358385390299512][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:35:36][358385390299512][256 ms][DEBUG] SU: done in 255 ms; outu0_a118 26897 22045 24311956 99036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:35:36][358385390299512][256 ms][DEBUG] targetPkg: running [2025-08-22 12:35:36][358385390299512][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-22 12:35:36][358385390299512][256 ms][DEBUG] START check_boot_completed [2025-08-22 12:35:36][358385390299512][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:35:36][358385390299512][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:35:36][358385390299512][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:35:36][358385390299512][335 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:35:36][358385390299512][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:35:36][358385390299512][335 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:35:36][358385390299512][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8605\"}'\'' -e'"" [2025-08-22 12:35:36][358385390299512][335 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:35:36][358385390299512][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8605\"}'\'' -e'"" [2025-08-22 12:35:40][358385390299512][3693 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 12:35:40][358385390299512][3849 ms][DEBUG] proc_open done in 3514 ms; code=255; res.len=115 [2025-08-22 12:35:40][358385390299512][3849 ms][DEBUG] END runCmdUntilRes#1 in 3514 ms [2025-08-22 12:35:40][358385390299512][3849 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 12:35:40][][0 ms][INFO] === Request start === [2025-08-22 12:35:40][][0 ms][DEBUG] START check_scloud [2025-08-22 12:35:40][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:35:40][][308 ms][DEBUG] SU: done in 308 ms; outu0_a118 26897 22045 24473884 108040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:35:40][][308 ms][DEBUG] targetPkg: running [2025-08-22 12:35:40][][308 ms][DEBUG] END check_scloud in 308 ms [2025-08-22 12:35:40][][308 ms][DEBUG] START check_boot_completed [2025-08-22 12:35:40][][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:35:40][][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:35:40][][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:35:41][][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:35:41][][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:35:41][][386 ms][DEBUG] rawBody.length=1131 [2025-08-22 12:35:41][][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1205\"}'\'' -e'"" [2025-08-22 12:35:41][][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:35:41][][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1205\"}'\'' -e'"" [2025-08-22 12:35:44][][3932 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 12:35:44][][4089 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=115 [2025-08-22 12:35:44][][4089 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-22 12:35:44][][4089 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 12:35:45][][0 ms][INFO] === Request start === [2025-08-22 12:35:45][][1 ms][DEBUG] START check_scloud [2025-08-22 12:35:45][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:35:45][][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 26897 22045 24641060 120016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:35:45][][293 ms][DEBUG] targetPkg: running [2025-08-22 12:35:45][][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-22 12:35:45][][293 ms][DEBUG] START check_boot_completed [2025-08-22 12:35:45][][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:35:45][][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:35:45][][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:35:45][][387 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 12:35:45][][388 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 12:35:45][][388 ms][DEBUG] rawBody.length=1131 [2025-08-22 12:35:45][][388 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2122\"}'\'' -e'"" [2025-08-22 12:35:45][][388 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:35:45][][388 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2122\"}'\'' -e'"" [2025-08-22 12:35:48][][3651 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 12:35:48][][3807 ms][DEBUG] proc_open done in 3419 ms; code=255; res.len=115 [2025-08-22 12:35:48][][3807 ms][DEBUG] END runCmdUntilRes#1 in 3420 ms [2025-08-22 12:35:48][][3807 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 12:35:50][358385390299512][0 ms][INFO] === Request start === [2025-08-22 12:35:50][358385390299512][0 ms][DEBUG] START check_scloud [2025-08-22 12:35:50][358385390299512][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:35:51][358385390299512][290 ms][DEBUG] SU: done in 290 ms; outu0_a118 26897 22045 24785708 131060 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:35:51][358385390299512][290 ms][DEBUG] targetPkg: running [2025-08-22 12:35:51][358385390299512][290 ms][DEBUG] END check_scloud in 290 ms [2025-08-22 12:35:51][358385390299512][290 ms][DEBUG] START check_boot_completed [2025-08-22 12:35:51][358385390299512][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:35:51][358385390299512][336 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:35:51][358385390299512][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:35:51][358385390299512][398 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:35:51][358385390299512][398 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-22 12:35:51][358385390299512][398 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:35:51][358385390299512][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4098\"}'\'' -e'"" [2025-08-22 12:35:51][358385390299512][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:35:51][358385390299512][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4098\"}'\'' -e'"" [2025-08-22 12:35:55][358385390299512][5038 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6b3d736f-6a97-4f89-8d38-506632424ac4","id":"QR_6b3d736f-6a97-4f89-8d38-506632424ac4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:35:56][358385390299512][5194 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3152 [2025-08-22 12:35:56][358385390299512][5194 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-08-22 12:35:56][358385390299512][5194 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:36:04][354916445480949][0 ms][INFO] === Request start === [2025-08-22 12:36:04][354916445480949][0 ms][DEBUG] START check_scloud [2025-08-22 12:36:04][354916445480949][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:36:05][354916445480949][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 26897 22045 24864712 142024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:36:05][354916445480949][304 ms][DEBUG] targetPkg: running [2025-08-22 12:36:05][354916445480949][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 12:36:05][354916445480949][304 ms][DEBUG] START check_boot_completed [2025-08-22 12:36:05][354916445480949][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:36:05][354916445480949][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:36:05][354916445480949][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:36:05][354916445480949][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:36:05][354916445480949][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:36:05][354916445480949][397 ms][DEBUG] START check_internet [2025-08-22 12:36:05][354916445480949][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:36:05][354916445480949][805 ms][DEBUG] SU: done in 408 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.027/201.027/201.027/0.000 ms\n [2025-08-22 12:36:05][354916445480949][805 ms][DEBUG] check_internet: online [2025-08-22 12:36:05][354916445480949][805 ms][DEBUG] END check_internet in 408 ms [2025-08-22 12:36:05][354916445480949][806 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:36:05][354916445480949][806 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916445480949\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W50K5W6H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7204\"}'\'' -e'"" [2025-08-22 12:36:05][354916445480949][806 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:36:05][354916445480949][806 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916445480949\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W50K5W6H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7204\"}'\'' -e'"" [2025-08-22 12:36:09][354916445480949][4615 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ed18182-d516-4f92-9175-d0b048c40b2a","id":"QR_5ed18182-d516-4f92-9175-d0b048c40b2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:36:09][354916445480949][4771 ms][DEBUG] proc_open done in 3965 ms; code=255; res.len=3152 [2025-08-22 12:36:09][354916445480949][4771 ms][DEBUG] END runCmdUntilRes#1 in 3965 ms [2025-08-22 12:36:09][354916445480949][4771 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:36:25][352967354074613][0 ms][INFO] === Request start === [2025-08-22 12:36:25][352967354074613][1 ms][DEBUG] START check_scloud [2025-08-22 12:36:25][352967354074613][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:36:25][352967354074613][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 26897 22045 24992776 152408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:36:25][352967354074613][316 ms][DEBUG] targetPkg: running [2025-08-22 12:36:25][352967354074613][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 12:36:25][352967354074613][316 ms][DEBUG] START check_boot_completed [2025-08-22 12:36:25][352967354074613][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:36:25][352967354074613][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:36:25][352967354074613][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:36:25][352967354074613][425 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:36:25][352967354074613][425 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:36:25][352967354074613][425 ms][DEBUG] START check_internet [2025-08-22 12:36:25][352967354074613][425 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:36:26][352967354074613][738 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.259/197.259/197.259/0.000 ms\n [2025-08-22 12:36:26][352967354074613][738 ms][DEBUG] check_internet: online [2025-08-22 12:36:26][352967354074613][738 ms][DEBUG] END check_internet in 313 ms [2025-08-22 12:36:26][352967354074613][738 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:36:26][352967354074613][738 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354074613\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8W1022T6H\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8755\"}'\'' -e'"" [2025-08-22 12:36:26][352967354074613][738 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:36:26][352967354074613][738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967354074613\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8W1022T6H\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8755\"}'\'' -e'"" [2025-08-22 12:36:32][352967354074613][7205 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_55abb5bc-fd85-48d8-a779-ea180f74139d","id":"QR_55abb5bc-fd85-48d8-a779-ea180f74139d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:36:32][352967354074613][7361 ms][DEBUG] proc_open done in 6623 ms; code=255; res.len=3152 [2025-08-22 12:36:32][352967354074613][7361 ms][DEBUG] END runCmdUntilRes#1 in 6623 ms [2025-08-22 12:36:32][352967354074613][7361 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:38:06][353818877456879][1 ms][INFO] === Request start === [2025-08-22 12:38:06][353818877456879][2 ms][DEBUG] START check_scloud [2025-08-22 12:38:06][353818877456879][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:38:06][353818877456879][295 ms][DEBUG] SU: done in 293 ms; outu0_a118 26897 22045 25135216 163164 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:38:06][353818877456879][295 ms][DEBUG] targetPkg: running [2025-08-22 12:38:06][353818877456879][295 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 12:38:06][353818877456879][295 ms][DEBUG] START check_boot_completed [2025-08-22 12:38:06][353818877456879][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:38:06][353818877456879][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:38:06][353818877456879][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:38:06][353818877456879][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:38:06][353818877456879][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:38:06][353818877456879][373 ms][DEBUG] START check_internet [2025-08-22 12:38:06][353818877456879][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:38:06][353818877456879][748 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=245 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 245.146/245.146/245.146/0.000 ms\n [2025-08-22 12:38:06][353818877456879][748 ms][DEBUG] check_internet: online [2025-08-22 12:38:06][353818877456879][748 ms][DEBUG] END check_internet in 375 ms [2025-08-22 12:38:06][353818877456879][748 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:38:06][353818877456879][748 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818877456879\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXA0S59XP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3360\"}'\'' -e'"" [2025-08-22 12:38:06][353818877456879][748 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:38:06][353818877456879][748 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818877456879\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXA0S59XP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3360\"}'\'' -e'"" [2025-08-22 12:38:15][353818877456879][9496 ms][DEBUG] proc_open done in 8747 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 12:38:15][353818877456879][9496 ms][DEBUG] END runCmdUntilRes#1 in 8748 ms [2025-08-22 12:38:15][353818877456879][9496 ms][WARN] Detected error: Process with pid 26897 either refused to load frida-agent, or terminated during injection [2025-08-22 12:38:15][353818877456879][9496 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 12:38:15][353818877456879][9668 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 12:38:15][353818877456879][9668 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 12:38:15][353818877456879][9668 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 12:38:15][353818877456879][9902 ms][DEBUG] SU: done in 234 ms; out [2025-08-22 12:38:15][353818877456879][9902 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 12:38:16][353818877456879][10356 ms][DEBUG] SU: done in 454 ms; out [2025-08-22 12:38:18][353818877456879][12370 ms][DEBUG] START check_boot_completed [2025-08-22 12:38:18][353818877456879][12370 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:38:18][353818877456879][12417 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:38:18][353818877456879][12417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:38:18][353818877456879][12480 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:38:18][353818877456879][12480 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 12:38:21][353818877456879][15494 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 12:38:21][353818877456879][15494 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818877456879\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXA0S59XP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3360\"}'\'' -e'"" [2025-08-22 12:38:23][353818877456879][16978 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-22 12:38:23][353818877456879][16978 ms][DEBUG] END runCmdUntilRes#2 in 1484 ms [2025-08-22 12:38:23][353818877456879][16978 ms][WARN] Detected error 2; Reboot the device [2025-08-22 12:38:23][353818877456879][16978 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 12:38:23][353818877456879][17603 ms][DEBUG] SU: done in 625 ms; out [2025-08-22 12:38:35][353818877456879][0 ms][INFO] === Request start === [2025-08-22 12:38:35][353818877456879][1 ms][DEBUG] START check_scloud [2025-08-22 12:38:35][353818877456879][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:38:35][353818877456879][35 ms][DEBUG] SU: done in 34 ms; out [2025-08-22 12:38:35][353818877456879][35 ms][WARN] targetPkg: not running, restarting [2025-08-22 12:38:35][353818877456879][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 12:38:35][353818877456879][66 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 12:38:35][353818877456879][66 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 12:38:35][353818877456879][97 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 12:38:37][353818877456879][2112 ms][DEBUG] END check_scloud in 2111 ms [2025-08-22 12:38:37][353818877456879][2113 ms][DEBUG] START check_boot_completed [2025-08-22 12:38:37][353818877456879][2113 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:39:26][353818877456879][0 ms][INFO] === Request start === [2025-08-22 12:39:26][353818877456879][1 ms][DEBUG] START check_scloud [2025-08-22 12:39:26][353818877456879][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:39:26][353818877456879][110 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 12:39:26][353818877456879][110 ms][WARN] targetPkg: not running, restarting [2025-08-22 12:39:26][353818877456879][110 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 12:39:26][353818877456879][142 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 12:39:26][353818877456879][142 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 12:39:26][353818877456879][173 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 12:39:28][353818877456879][2185 ms][DEBUG] END check_scloud in 2184 ms [2025-08-22 12:39:28][353818877456879][2185 ms][DEBUG] START check_boot_completed [2025-08-22 12:39:28][353818877456879][2185 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:39:28][353818877456879][2232 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:39:28][353818877456879][2232 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:39:28][353818877456879][2294 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:39:28][353818877456879][2294 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:39:28][353818877456879][2294 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:39:28][353818877456879][2294 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818877456879\",\"model\":\"SM-A065F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YXA0S59XP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8159\"}'\'' -e'"" [2025-08-22 12:39:28][353818877456879][2294 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:39:28][353818877456879][2294 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818877456879\",\"model\":\"SM-A065F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YXA0S59XP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8159\"}'\'' -e'"" [2025-08-22 12:39:32][353818877456879][5903 ms][DEBUG] proc_open done in 3609 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 12:39:32][353818877456879][5903 ms][DEBUG] END runCmdUntilRes#1 in 3609 ms [2025-08-22 12:39:32][353818877456879][5903 ms][WARN] Detected error: Process not found [2025-08-22 12:39:32][353818877456879][5903 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 12:39:32][353818877456879][6139 ms][DEBUG] SU: done in 235 ms; out [2025-08-22 12:39:32][353818877456879][6139 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 12:39:32][353818877456879][6139 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 12:39:33][353818877456879][6340 ms][DEBUG] SU: done in 201 ms; out [2025-08-22 12:39:33][353818877456879][6340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 12:39:33][353818877456879][6840 ms][DEBUG] SU: done in 500 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 12:39:35][353818877456879][8855 ms][DEBUG] START check_boot_completed [2025-08-22 12:39:35][353818877456879][8855 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:39:35][353818877456879][8902 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:39:35][353818877456879][8902 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:39:35][353818877456879][9027 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 12:39:35][353818877456879][9027 ms][DEBUG] END check_boot_completed in 172 ms [2025-08-22 12:39:38][353818877456879][12042 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 12:39:38][353818877456879][12042 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818877456879\",\"model\":\"SM-A065F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YXA0S59XP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8159\"}'\'' -e'"" [2025-08-22 12:39:48][353818877456879][21524 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30e015e7-bd42-412b-9a47-3dec114bbdc1","id":"QR_30e015e7-bd42-412b-9a47-3dec114bbdc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:39:48][353818877456879][21680 ms][DEBUG] proc_open done in 9638 ms; code=255; res.len=3152 [2025-08-22 12:39:48][353818877456879][21680 ms][DEBUG] END runCmdUntilRes#2 in 9638 ms [2025-08-22 12:39:48][353818877456879][21680 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:41:07][352990187435413][1 ms][INFO] === Request start === [2025-08-22 12:41:07][352990187435413][2 ms][DEBUG] START check_scloud [2025-08-22 12:41:07][352990187435413][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:41:08][352990187435413][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 7820 4972 23643828 64056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:41:08][352990187435413][311 ms][DEBUG] targetPkg: running [2025-08-22 12:41:08][352990187435413][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 12:41:08][352990187435413][311 ms][DEBUG] START check_boot_completed [2025-08-22 12:41:08][352990187435413][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:41:08][352990187435413][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:41:08][352990187435413][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:41:08][352990187435413][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:41:08][352990187435413][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:41:08][352990187435413][420 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:41:08][352990187435413][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990187435413\",\"model\":\"SM-A346B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCWB12CY2D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8254\"}'\'' -e'"" [2025-08-22 12:41:08][352990187435413][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:41:08][352990187435413][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352990187435413\",\"model\":\"SM-A346B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCWB12CY2D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8254\"}'\'' -e'"" [2025-08-22 12:41:12][352990187435413][5122 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5eab0f2f-e368-4b9a-8fd1-e665ec582b7b","id":"QR_5eab0f2f-e368-4b9a-8fd1-e665ec582b7b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:41:13][352990187435413][5278 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3152 [2025-08-22 12:41:13][352990187435413][5279 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-08-22 12:41:13][352990187435413][5279 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:42:05][353341120659413][0 ms][INFO] === Request start === [2025-08-22 12:42:05][353341120659413][1 ms][DEBUG] START check_scloud [2025-08-22 12:42:05][353341120659413][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:42:05][353341120659413][284 ms][DEBUG] SU: done in 283 ms; outu0_a118 7820 4972 23766860 87448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:42:05][353341120659413][284 ms][DEBUG] targetPkg: running [2025-08-22 12:42:05][353341120659413][284 ms][DEBUG] END check_scloud in 283 ms [2025-08-22 12:42:05][353341120659413][285 ms][DEBUG] START check_boot_completed [2025-08-22 12:42:05][353341120659413][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:42:05][353341120659413][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:42:05][353341120659413][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:42:05][353341120659413][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:42:05][353341120659413][378 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:42:05][353341120659413][378 ms][DEBUG] START check_internet [2025-08-22 12:42:05][353341120659413][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:42:06][353341120659413][846 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.183/202.183/202.183/0.000 ms\n [2025-08-22 12:42:06][353341120659413][846 ms][DEBUG] check_internet: online [2025-08-22 12:42:06][353341120659413][846 ms][DEBUG] END check_internet in 469 ms [2025-08-22 12:42:06][353341120659413][847 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:42:06][353341120659413][847 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353341120659413\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T34YXE7N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4091\"}'\'' -e'"" [2025-08-22 12:42:06][353341120659413][847 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:42:06][353341120659413][847 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353341120659413\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T34YXE7N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4091\"}'\'' -e'"" [2025-08-22 12:42:10][353341120659413][5064 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4f555f8a-52a7-4d7e-be68-df2675148ae5","id":"QR_4f555f8a-52a7-4d7e-be68-df2675148ae5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:42:10][353341120659413][5220 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3152 [2025-08-22 12:42:10][353341120659413][5220 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-22 12:42:10][353341120659413][5220 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:42:20][353818877456879][0 ms][INFO] === Request start === [2025-08-22 12:42:20][353818877456879][1 ms][DEBUG] START check_scloud [2025-08-22 12:42:20][353818877456879][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:42:20][353818877456879][278 ms][DEBUG] SU: done in 276 ms; outu0_a118 7820 4972 23913684 99136 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:42:20][353818877456879][278 ms][DEBUG] targetPkg: running [2025-08-22 12:42:20][353818877456879][278 ms][DEBUG] END check_scloud in 277 ms [2025-08-22 12:42:20][353818877456879][278 ms][DEBUG] START check_boot_completed [2025-08-22 12:42:20][353818877456879][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:42:20][353818877456879][324 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:42:20][353818877456879][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:42:21][353818877456879][373 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 12:42:21][353818877456879][373 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 12:42:21][353818877456879][373 ms][DEBUG] START check_internet [2025-08-22 12:42:21][353818877456879][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:42:21][353818877456879][637 ms][DEBUG] SU: done in 264 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=154 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 154.092/154.092/154.092/0.000 ms\n [2025-08-22 12:42:21][353818877456879][637 ms][DEBUG] check_internet: online [2025-08-22 12:42:21][353818877456879][637 ms][DEBUG] END check_internet in 264 ms [2025-08-22 12:42:21][353818877456879][637 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:42:21][353818877456879][637 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818877456879\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXA0S59XP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6007\"}'\'' -e'"" [2025-08-22 12:42:21][353818877456879][637 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:42:21][353818877456879][638 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353818877456879\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXA0S59XP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6007\"}'\'' -e'"" [2025-08-22 12:42:25][353818877456879][4839 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b36bfbce-b85c-4399-8201-00b0583196d0","id":"QR_b36bfbce-b85c-4399-8201-00b0583196d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:42:25][353818877456879][4995 ms][DEBUG] proc_open done in 4357 ms; code=255; res.len=3152 [2025-08-22 12:42:25][353818877456879][4995 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-22 12:42:25][353818877456879][4995 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:44:07][357576781002371][1 ms][INFO] === Request start === [2025-08-22 12:44:07][357576781002371][2 ms][DEBUG] START check_scloud [2025-08-22 12:44:07][357576781002371][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:44:07][357576781002371][325 ms][DEBUG] SU: done in 324 ms; outu0_a118 7820 4972 24037588 110256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:44:07][357576781002371][325 ms][DEBUG] targetPkg: running [2025-08-22 12:44:07][357576781002371][325 ms][DEBUG] END check_scloud in 324 ms [2025-08-22 12:44:07][357576781002371][325 ms][DEBUG] START check_boot_completed [2025-08-22 12:44:07][357576781002371][325 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:44:07][357576781002371][372 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:44:07][357576781002371][372 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:44:07][357576781002371][421 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 12:44:07][357576781002371][421 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 12:44:07][357576781002371][421 ms][DEBUG] START check_internet [2025-08-22 12:44:07][357576781002371][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:44:08][357576781002371][794 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=239 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 239.279/239.279/239.279/0.000 ms\n [2025-08-22 12:44:08][357576781002371][794 ms][DEBUG] check_internet: online [2025-08-22 12:44:08][357576781002371][794 ms][DEBUG] END check_internet in 373 ms [2025-08-22 12:44:08][357576781002371][794 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:44:08][357576781002371][794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781002371\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX406SJ9X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3857\"}'\'' -e'"" [2025-08-22 12:44:08][357576781002371][794 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:44:08][357576781002371][795 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357576781002371\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX406SJ9X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3857\"}'\'' -e'"" [2025-08-22 12:44:14][357576781002371][7589 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e65a96c9-2e1f-4f6f-815c-c1e036915f2f","id":"QR_e65a96c9-2e1f-4f6f-815c-c1e036915f2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:44:15][357576781002371][7745 ms][DEBUG] proc_open done in 6950 ms; code=255; res.len=3152 [2025-08-22 12:44:15][357576781002371][7745 ms][DEBUG] END runCmdUntilRes#1 in 6951 ms [2025-08-22 12:44:15][357576781002371][7745 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:46:08][351642489452031][1 ms][INFO] === Request start === [2025-08-22 12:46:08][351642489452031][2 ms][DEBUG] START check_scloud [2025-08-22 12:46:08][351642489452031][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:46:08][351642489452031][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 7820 4972 24196536 120332 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:46:08][351642489452031][317 ms][DEBUG] targetPkg: running [2025-08-22 12:46:08][351642489452031][318 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 12:46:08][351642489452031][318 ms][DEBUG] START check_boot_completed [2025-08-22 12:46:08][351642489452031][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:46:08][351642489452031][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:46:08][351642489452031][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:46:08][351642489452031][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:46:08][351642489452031][411 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 12:46:08][351642489452031][411 ms][DEBUG] START check_internet [2025-08-22 12:46:08][351642489452031][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:46:09][351642489452031][864 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.699/201.699/201.699/0.000 ms\n [2025-08-22 12:46:09][351642489452031][864 ms][DEBUG] check_internet: online [2025-08-22 12:46:09][351642489452031][864 ms][DEBUG] END check_internet in 453 ms [2025-08-22 12:46:09][351642489452031][864 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:46:09][351642489452031][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642489452031\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X60H7SYZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1517\"}'\'' -e'"" [2025-08-22 12:46:09][351642489452031][864 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:46:09][351642489452031][865 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351642489452031\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X60H7SYZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1517\"}'\'' -e'"" [2025-08-22 12:46:13][351642489452031][5019 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_281df3c7-258f-4a52-8ac7-e45017963924","id":"QR_281df3c7-258f-4a52-8ac7-e45017963924","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:46:13][351642489452031][5175 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3152 [2025-08-22 12:46:13][351642489452031][5175 ms][DEBUG] END runCmdUntilRes#1 in 4311 ms [2025-08-22 12:46:13][351642489452031][5175 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:47:01][355382709962271][0 ms][INFO] === Request start === [2025-08-22 12:47:01][355382709962271][1 ms][DEBUG] START check_scloud [2025-08-22 12:47:01][355382709962271][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:47:02][355382709962271][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 7820 4972 24306332 130828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:47:02][355382709962271][286 ms][DEBUG] targetPkg: running [2025-08-22 12:47:02][355382709962271][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-22 12:47:02][355382709962271][287 ms][DEBUG] START check_boot_completed [2025-08-22 12:47:02][355382709962271][287 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:47:02][355382709962271][333 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:47:02][355382709962271][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:47:02][355382709962271][382 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 12:47:02][355382709962271][382 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 12:47:02][355382709962271][382 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:47:02][355382709962271][382 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382709962271\",\"model\":\"SM-A536E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCTA06631L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2407\"}'\'' -e'"" [2025-08-22 12:47:02][355382709962271][382 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:47:02][355382709962271][382 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382709962271\",\"model\":\"SM-A536E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCTA06631L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2407\"}'\'' -e'"" [2025-08-22 12:47:06][355382709962271][4738 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3216b4d9-a37a-47b2-90cc-32e9981d7d4a","id":"QR_3216b4d9-a37a-47b2-90cc-32e9981d7d4a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:47:06][355382709962271][4894 ms][DEBUG] proc_open done in 4512 ms; code=255; res.len=3152 [2025-08-22 12:47:06][355382709962271][4894 ms][DEBUG] END runCmdUntilRes#1 in 4513 ms [2025-08-22 12:47:06][355382709962271][4894 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:47:07][350938284924187][0 ms][INFO] === Request start === [2025-08-22 12:47:07][350938284924187][1 ms][DEBUG] START check_scloud [2025-08-22 12:47:07][350938284924187][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:47:07][350938284924187][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 7820 4972 24487844 142624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:47:07][350938284924187][313 ms][DEBUG] targetPkg: running [2025-08-22 12:47:07][350938284924187][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 12:47:07][350938284924187][313 ms][DEBUG] START check_boot_completed [2025-08-22 12:47:07][350938284924187][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:47:07][350938284924187][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:47:07][350938284924187][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:47:07][350938284924187][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:47:07][350938284924187][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 12:47:07][350938284924187][407 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:47:07][350938284924187][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938284924187\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y10CB6QZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5658\"}'\'' -e'"" [2025-08-22 12:47:07][350938284924187][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:47:07][350938284924187][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938284924187\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y10CB6QZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5658\"}'\'' -e'"" [2025-08-22 12:47:11][350938284924187][4328 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5d7d8f4-b06f-411b-a99b-767e8d4e1acd","id":"QR_d5d7d8f4-b06f-411b-a99b-767e8d4e1acd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:47:11][350938284924187][4484 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3152 [2025-08-22 12:47:11][350938284924187][4484 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-22 12:47:11][350938284924187][4484 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:47:36][354952830288308][1 ms][INFO] === Request start === [2025-08-22 12:47:36][354952830288308][2 ms][DEBUG] START check_scloud [2025-08-22 12:47:36][354952830288308][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:47:37][354952830288308][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 7820 4972 24599652 153916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:47:37][354952830288308][297 ms][DEBUG] targetPkg: running [2025-08-22 12:47:37][354952830288308][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-22 12:47:37][354952830288308][297 ms][DEBUG] START check_boot_completed [2025-08-22 12:47:37][354952830288308][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:47:37][354952830288308][343 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 12:47:37][354952830288308][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:47:37][354952830288308][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:47:37][354952830288308][390 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 12:47:37][354952830288308][390 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:47:37][354952830288308][390 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952830288308\",\"model\":\"SM-A217M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8N6023GTL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1500\"}'\'' -e'"" [2025-08-22 12:47:37][354952830288308][390 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:47:37][354952830288308][390 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354952830288308\",\"model\":\"SM-A217M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8N6023GTL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1500\"}'\'' -e'"" [2025-08-22 12:47:42][354952830288308][5810 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77d6d0d9-5391-4d50-ae6b-3dbbc7131e47","id":"QR_77d6d0d9-5391-4d50-ae6b-3dbbc7131e47","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:47:42][354952830288308][5966 ms][DEBUG] proc_open done in 5577 ms; code=255; res.len=3152 [2025-08-22 12:47:42][354952830288308][5966 ms][DEBUG] END runCmdUntilRes#1 in 5577 ms [2025-08-22 12:47:42][354952830288308][5966 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:48:08][357561073010225][0 ms][INFO] === Request start === [2025-08-22 12:48:08][357561073010225][1 ms][DEBUG] START check_scloud [2025-08-22 12:48:08][357561073010225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:48:09][357561073010225][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 7820 4972 24728960 165172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:48:09][357561073010225][304 ms][DEBUG] targetPkg: running [2025-08-22 12:48:09][357561073010225][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 12:48:09][357561073010225][304 ms][DEBUG] START check_boot_completed [2025-08-22 12:48:09][357561073010225][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:48:09][357561073010225][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:48:09][357561073010225][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:48:09][357561073010225][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:48:09][357561073010225][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:48:09][357561073010225][397 ms][DEBUG] START check_internet [2025-08-22 12:48:09][357561073010225][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:48:09][357561073010225][710 ms][DEBUG] SU: done in 313 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=215 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 215.571/215.571/215.571/0.000 ms\n [2025-08-22 12:48:09][357561073010225][710 ms][DEBUG] check_internet: online [2025-08-22 12:48:09][357561073010225][710 ms][DEBUG] END check_internet in 313 ms [2025-08-22 12:48:09][357561073010225][710 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:48:09][357561073010225][710 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357561073010225\",\"model\":\"SM-X610\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X904S8AW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9224\"}'\'' -e'"" [2025-08-22 12:48:09][357561073010225][710 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:48:09][357561073010225][710 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357561073010225\",\"model\":\"SM-X610\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X904S8AW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9224\"}'\'' -e'"" [2025-08-22 12:48:13][357561073010225][4959 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_23215b81-4876-40a3-81a4-19a4efc1a8af","id":"QR_23215b81-4876-40a3-81a4-19a4efc1a8af","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:48:13][357561073010225][5115 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3152 [2025-08-22 12:48:13][357561073010225][5115 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-22 12:48:13][357561073010225][5115 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:49:04][351978522481128][1 ms][INFO] === Request start === [2025-08-22 12:49:04][351978522481128][2 ms][DEBUG] START check_scloud [2025-08-22 12:49:04][351978522481128][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:49:04][351978522481128][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 7820 4972 24892004 175904 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:49:04][351978522481128][311 ms][DEBUG] targetPkg: running [2025-08-22 12:49:04][351978522481128][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 12:49:04][351978522481128][311 ms][DEBUG] START check_boot_completed [2025-08-22 12:49:04][351978522481128][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:49:04][351978522481128][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:49:04][351978522481128][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:49:04][351978522481128][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:49:04][351978522481128][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:49:04][351978522481128][404 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:49:04][351978522481128][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522481128\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TA0Y5HPL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9049\"}'\'' -e'"" [2025-08-22 12:49:04][351978522481128][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:49:04][351978522481128][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351978522481128\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TA0Y5HPL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9049\"}'\'' -e'"" [2025-08-22 12:49:08][351978522481128][4122 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2cac3cbb-a1b9-4a8d-af07-e7d96026d0c1","id":"QR_2cac3cbb-a1b9-4a8d-af07-e7d96026d0c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:49:08][351978522481128][4279 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3152 [2025-08-22 12:49:08][351978522481128][4279 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-22 12:49:08][351978522481128][4279 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:49:14][359468678654191][1 ms][INFO] === Request start === [2025-08-22 12:49:14][359468678654191][2 ms][DEBUG] START check_scloud [2025-08-22 12:49:14][359468678654191][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:49:14][359468678654191][294 ms][DEBUG] SU: done in 292 ms; outu0_a118 7820 4972 25055088 187264 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:49:14][359468678654191][294 ms][DEBUG] targetPkg: running [2025-08-22 12:49:14][359468678654191][294 ms][DEBUG] END check_scloud in 292 ms [2025-08-22 12:49:14][359468678654191][294 ms][DEBUG] START check_boot_completed [2025-08-22 12:49:14][359468678654191][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:49:14][359468678654191][325 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:49:14][359468678654191][325 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:49:14][359468678654191][372 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:49:14][359468678654191][372 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:49:14][359468678654191][372 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:49:14][359468678654191][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468678654191\",\"model\":\"SM-E156B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY32DSJXR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9149\"}'\'' -e'"" [2025-08-22 12:49:14][359468678654191][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:49:14][359468678654191][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468678654191\",\"model\":\"SM-E156B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY32DSJXR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9149\"}'\'' -e'"" [2025-08-22 12:49:19][359468678654191][5121 ms][DEBUG] proc_open done in 4749 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 12:49:19][359468678654191][5121 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-08-22 12:49:19][359468678654191][5121 ms][WARN] Detected error: Process with pid 7820 either refused to load frida-agent, or terminated during injection [2025-08-22 12:49:19][359468678654191][5121 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 12:49:19][359468678654191][5261 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 12:49:19][359468678654191][5261 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 12:49:19][359468678654191][5262 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 12:49:19][359468678654191][5402 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 12:49:19][359468678654191][5402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 12:49:19][359468678654191][5589 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 12:49:20][350247871434513][0 ms][INFO] === Request start === [2025-08-22 12:49:21][359468678654191][7604 ms][DEBUG] START check_boot_completed [2025-08-22 12:49:21][359468678654191][7604 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:49:21][359468678654191][7636 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:49:21][359468678654191][7636 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:49:21][359468678654191][7683 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:49:21][359468678654191][7683 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 12:49:24][359468678654191][10697 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 12:49:24][359468678654191][10698 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359468678654191\",\"model\":\"SM-E156B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY32DSJXR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9149\"}'\'' -e'"" [2025-08-22 12:49:28][359468678654191][14900 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0f7aca7a-1b48-40be-b4f0-1edeb2772626","id":"QR_0f7aca7a-1b48-40be-b4f0-1edeb2772626","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:49:29][359468678654191][15056 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3152 [2025-08-22 12:49:29][359468678654191][15056 ms][DEBUG] END runCmdUntilRes#2 in 4358 ms [2025-08-22 12:49:29][359468678654191][15056 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:49:29][350247871434513][9132 ms][DEBUG] START check_scloud [2025-08-22 12:49:29][350247871434513][9132 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:49:29][350247871434513][9445 ms][DEBUG] SU: done in 312 ms; outu0_a118 17747 4972 23761464 124740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:49:29][350247871434513][9445 ms][DEBUG] targetPkg: running [2025-08-22 12:49:29][350247871434513][9445 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 12:49:29][350247871434513][9445 ms][DEBUG] START check_boot_completed [2025-08-22 12:49:29][350247871434513][9445 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:49:29][350247871434513][9492 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:49:29][350247871434513][9492 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:49:29][350247871434513][9554 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 12:49:29][350247871434513][9554 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 12:49:29][350247871434513][9554 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:49:29][350247871434513][9554 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871434513\",\"model\":\"SM-N980F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N806GP8B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3911\"}'\'' -e'"" [2025-08-22 12:49:29][350247871434513][9554 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:49:29][350247871434513][9554 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350247871434513\",\"model\":\"SM-N980F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N806GP8B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3911\"}'\'' -e'"" [2025-08-22 12:49:33][350247871434513][13256 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9ae54ee-ab37-4c45-9015-17a4095d757c","id":"QR_e9ae54ee-ab37-4c45-9015-17a4095d757c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:49:33][350247871434513][13412 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=3152 [2025-08-22 12:49:33][350247871434513][13412 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-22 12:49:33][350247871434513][13413 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:50:06][355382706378190][0 ms][INFO] === Request start === [2025-08-22 12:50:06][355382706378190][1 ms][DEBUG] START check_scloud [2025-08-22 12:50:06][355382706378190][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:50:07][355382706378190][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 17747 4972 23813616 138828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:50:07][355382706378190][314 ms][DEBUG] targetPkg: running [2025-08-22 12:50:07][355382706378190][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 12:50:07][355382706378190][315 ms][DEBUG] START check_boot_completed [2025-08-22 12:50:07][355382706378190][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:50:07][355382706378190][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:50:07][355382706378190][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:50:07][355382706378190][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 12:50:07][355382706378190][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 12:50:07][355382706378190][410 ms][DEBUG] START check_internet [2025-08-22 12:50:07][355382706378190][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:50:07][355382706378190][908 ms][DEBUG] SU: done in 498 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.318/202.318/202.318/0.000 ms\n [2025-08-22 12:50:07][355382706378190][908 ms][DEBUG] check_internet: online [2025-08-22 12:50:07][355382706378190][908 ms][DEBUG] END check_internet in 498 ms [2025-08-22 12:50:07][355382706378190][908 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:50:07][355382706378190][908 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382706378190\",\"model\":\"SM-A536E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90R61HB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8511\"}'\'' -e'"" [2025-08-22 12:50:07][355382706378190][908 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:50:07][355382706378190][908 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355382706378190\",\"model\":\"SM-A536E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90R61HB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8511\"}'\'' -e'"" [2025-08-22 12:50:11][355382706378190][4704 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7d34d620-081d-4b0f-b895-52f86effae8f","id":"QR_7d34d620-081d-4b0f-b895-52f86effae8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:50:11][355382706378190][4860 ms][DEBUG] proc_open done in 3951 ms; code=255; res.len=3152 [2025-08-22 12:50:11][355382706378190][4860 ms][DEBUG] END runCmdUntilRes#1 in 3952 ms [2025-08-22 12:50:11][355382706378190][4860 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:54:07][351031125369843][1 ms][INFO] === Request start === [2025-08-22 12:54:07][351031125369843][2 ms][DEBUG] START check_scloud [2025-08-22 12:54:07][351031125369843][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:54:07][351031125369843][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 17747 4972 23958208 150496 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:54:07][351031125369843][295 ms][DEBUG] targetPkg: running [2025-08-22 12:54:07][351031125369843][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-22 12:54:07][351031125369843][295 ms][DEBUG] START check_boot_completed [2025-08-22 12:54:07][351031125369843][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:54:07][351031125369843][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 12:54:07][351031125369843][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:54:07][351031125369843][389 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 12:54:07][351031125369843][389 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 12:54:07][351031125369843][389 ms][DEBUG] START check_internet [2025-08-22 12:54:07][351031125369843][389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:54:08][351031125369843][936 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.162/202.162/202.162/0.000 ms\n [2025-08-22 12:54:08][351031125369843][936 ms][DEBUG] check_internet: online [2025-08-22 12:54:08][351031125369843][936 ms][DEBUG] END check_internet in 546 ms [2025-08-22 12:54:08][351031125369843][936 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:54:08][351031125369843][936 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031125369843\",\"model\":\"SM-A156E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY20080CW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MDA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3245\"}'\'' -e'"" [2025-08-22 12:54:08][351031125369843][936 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:54:08][351031125369843][936 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351031125369843\",\"model\":\"SM-A156E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY20080CW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MDA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3245\"}'\'' -e'"" [2025-08-22 12:54:12][351031125369843][5216 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94f76732-3f86-4dfc-bb69-7cc82ea12433","id":"QR_94f76732-3f86-4dfc-bb69-7cc82ea12433","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:54:12][351031125369843][5372 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3152 [2025-08-22 12:54:12][351031125369843][5372 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-22 12:54:12][351031125369843][5372 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:58:38][350091123408903][1 ms][INFO] === Request start === [2025-08-22 12:58:38][350091123408903][2 ms][DEBUG] START check_scloud [2025-08-22 12:58:38][350091123408903][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:58:38][350091123408903][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 17747 4972 24088164 162008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:58:38][350091123408903][315 ms][DEBUG] targetPkg: running [2025-08-22 12:58:38][350091123408903][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 12:58:38][350091123408903][315 ms][DEBUG] START check_boot_completed [2025-08-22 12:58:38][350091123408903][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:58:38][350091123408903][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 12:58:38][350091123408903][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:58:38][350091123408903][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:58:38][350091123408903][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:58:38][350091123408903][409 ms][DEBUG] START check_internet [2025-08-22 12:58:38][350091123408903][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 12:58:39][350091123408903][893 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=223 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 223.331/223.331/223.331/0.000 ms\n [2025-08-22 12:58:39][350091123408903][893 ms][DEBUG] check_internet: online [2025-08-22 12:58:39][350091123408903][893 ms][DEBUG] END check_internet in 484 ms [2025-08-22 12:58:39][350091123408903][893 ms][DEBUG] rawBody.length=1160 [2025-08-22 12:58:39][350091123408903][893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091123408903\",\"model\":\"SM-X510\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52WA0QNAQZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3691\"}'\'' -e'"" [2025-08-22 12:58:39][350091123408903][893 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:58:39][350091123408903][893 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350091123408903\",\"model\":\"SM-X510\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52WA0QNAQZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3691\"}'\'' -e'"" [2025-08-22 12:58:43][350091123408903][4985 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_748f739e-cc24-4266-b508-d287fa5b093a","id":"QR_748f739e-cc24-4266-b508-d287fa5b093a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:58:43][350091123408903][5142 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 12:58:43][350091123408903][5142 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-22 12:58:43][350091123408903][5142 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 12:59:04][352600229074076][1 ms][INFO] === Request start === [2025-08-22 12:59:04][352600229074076][2 ms][DEBUG] START check_scloud [2025-08-22 12:59:04][352600229074076][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 12:59:05][352600229074076][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 17747 4972 24251400 171628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 12:59:05][352600229074076][318 ms][DEBUG] targetPkg: running [2025-08-22 12:59:05][352600229074076][318 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 12:59:05][352600229074076][318 ms][DEBUG] START check_boot_completed [2025-08-22 12:59:05][352600229074076][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 12:59:05][352600229074076][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 12:59:05][352600229074076][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 12:59:05][352600229074076][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 12:59:05][352600229074076][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 12:59:05][352600229074076][411 ms][DEBUG] rawBody.length=1161 [2025-08-22 12:59:05][352600229074076][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229074076\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y60H7DGZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1796\"}'\'' -e'"" [2025-08-22 12:59:05][352600229074076][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 12:59:05][352600229074076][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600229074076\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y60H7DGZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1796\"}'\'' -e'"" [2025-08-22 12:59:09][352600229074076][4410 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a32f41f-531d-485b-8a48-f0f690966c97","id":"QR_7a32f41f-531d-485b-8a48-f0f690966c97","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 12:59:09][352600229074076][4567 ms][DEBUG] proc_open done in 4155 ms; code=255; res.len=3152 [2025-08-22 12:59:09][352600229074076][4567 ms][DEBUG] END runCmdUntilRes#1 in 4155 ms [2025-08-22 12:59:09][352600229074076][4567 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:02:24][353684140577390][1 ms][INFO] === Request start === [2025-08-22 13:02:24][353684140577390][2 ms][DEBUG] START check_scloud [2025-08-22 13:02:24][353684140577390][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:02:25][353684140577390][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 17747 4972 24358700 183720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:02:25][353684140577390][305 ms][DEBUG] targetPkg: running [2025-08-22 13:02:25][353684140577390][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 13:02:25][353684140577390][305 ms][DEBUG] START check_boot_completed [2025-08-22 13:02:25][353684140577390][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:02:25][353684140577390][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:02:25][353684140577390][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:02:25][353684140577390][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:02:25][353684140577390][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:02:25][353684140577390][383 ms][DEBUG] START check_internet [2025-08-22 13:02:25][353684140577390][383 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:02:25][353684140577390][883 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.444/202.444/202.444/0.000 ms\n [2025-08-22 13:02:25][353684140577390][883 ms][DEBUG] check_internet: online [2025-08-22 13:02:25][353684140577390][883 ms][DEBUG] END check_internet in 500 ms [2025-08-22 13:02:25][353684140577390][883 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:02:25][353684140577390][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140577390\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y600FXSD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9526\"}'\'' -e'"" [2025-08-22 13:02:25][353684140577390][883 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:02:25][353684140577390][883 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684140577390\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y600FXSD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9526\"}'\'' -e'"" [2025-08-22 13:02:30][353684140577390][5209 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_22fbda61-230d-4e38-8884-05062527b0d8","id":"QR_22fbda61-230d-4e38-8884-05062527b0d8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:02:30][353684140577390][5366 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3152 [2025-08-22 13:02:30][353684140577390][5366 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-22 13:02:30][353684140577390][5366 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:03:05][354068196391394][0 ms][INFO] === Request start === [2025-08-22 13:03:05][354068196391394][1 ms][DEBUG] START check_scloud [2025-08-22 13:03:05][354068196391394][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:03:05][354068196391394][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 17747 4972 24488976 184652 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:03:05][354068196391394][308 ms][DEBUG] targetPkg: running [2025-08-22 13:03:05][354068196391394][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 13:03:05][354068196391394][308 ms][DEBUG] START check_boot_completed [2025-08-22 13:03:05][354068196391394][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:03:05][354068196391394][353 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 13:03:05][354068196391394][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:03:05][354068196391394][401 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 13:03:05][354068196391394][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:03:05][354068196391394][401 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:03:05][354068196391394][401 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196391394\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W301D6RN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2875\"}'\'' -e'"" [2025-08-22 13:03:05][354068196391394][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:03:05][354068196391394][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068196391394\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W301D6RN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2875\"}'\'' -e'"" [2025-08-22 13:03:10][354068196391394][5039 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2807942-21da-4795-8efb-fd5f6facaf82","id":"QR_e2807942-21da-4795-8efb-fd5f6facaf82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:03:10][354068196391394][5195 ms][DEBUG] proc_open done in 4794 ms; code=255; res.len=3152 [2025-08-22 13:03:10][354068196391394][5196 ms][DEBUG] END runCmdUntilRes#1 in 4794 ms [2025-08-22 13:03:10][354068196391394][5196 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:04:07][355241321295611][0 ms][INFO] === Request start === [2025-08-22 13:04:07][355241321295611][1 ms][DEBUG] START check_scloud [2025-08-22 13:04:07][355241321295611][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:04:07][355241321295611][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 17747 4972 24649844 196512 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:04:07][355241321295611][298 ms][DEBUG] targetPkg: running [2025-08-22 13:04:07][355241321295611][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 13:04:07][355241321295611][298 ms][DEBUG] START check_boot_completed [2025-08-22 13:04:07][355241321295611][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:04:07][355241321295611][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:04:07][355241321295611][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:04:07][355241321295611][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:04:07][355241321295611][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:04:07][355241321295611][391 ms][DEBUG] START check_internet [2025-08-22 13:04:07][355241321295611][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:04:07][355241321295611][688 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.324/193.324/193.324/0.000 ms\n [2025-08-22 13:04:07][355241321295611][688 ms][DEBUG] check_internet: online [2025-08-22 13:04:07][355241321295611][688 ms][DEBUG] END check_internet in 297 ms [2025-08-22 13:04:07][355241321295611][688 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:04:07][355241321295611][688 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321295611\",\"model\":\"SM-G556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX22BN1VD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8433\"}'\'' -e'"" [2025-08-22 13:04:07][355241321295611][688 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:04:07][355241321295611][688 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355241321295611\",\"model\":\"SM-G556B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX22BN1VD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEE\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8433\"}'\'' -e'"" [2025-08-22 13:04:12][358371620124696][1 ms][INFO] === Request start === [2025-08-22 13:04:12][355241321295611][4968 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_371f8fa8-8ef3-4975-96d6-332309e18a21","id":"QR_371f8fa8-8ef3-4975-96d6-332309e18a21","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:04:12][355241321295611][5124 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3152 [2025-08-22 13:04:12][355241321295611][5124 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-22 13:04:12][355241321295611][5124 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:04:13][358371620124696][1014 ms][DEBUG] START check_scloud [2025-08-22 13:04:13][358371620124696][1014 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:04:13][358371620124696][1295 ms][DEBUG] SU: done in 281 ms; outu0_a118 17747 4972 24829180 207040 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:04:13][358371620124696][1295 ms][DEBUG] targetPkg: running [2025-08-22 13:04:13][358371620124696][1295 ms][DEBUG] END check_scloud in 281 ms [2025-08-22 13:04:13][358371620124696][1295 ms][DEBUG] START check_boot_completed [2025-08-22 13:04:13][358371620124696][1295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:04:13][358371620124696][1326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:04:13][358371620124696][1326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:04:13][358371620124696][1373 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:04:13][358371620124696][1373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:04:13][358371620124696][1373 ms][DEBUG] START check_internet [2025-08-22 13:04:13][358371620124696][1373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:04:13][358371620124696][1623 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.684/138.684/138.684/0.000 ms\n [2025-08-22 13:04:13][358371620124696][1624 ms][DEBUG] check_internet: online [2025-08-22 13:04:13][358371620124696][1624 ms][DEBUG] END check_internet in 250 ms [2025-08-22 13:04:13][358371620124696][1624 ms][DEBUG] rawBody.length=1159 [2025-08-22 13:04:13][358371620124696][1624 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358371620124696\",\"model\":\"SM-T735\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52RA0CMECX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2603\"}'\'' -e'"" [2025-08-22 13:04:13][358371620124696][1624 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:04:13][358371620124696][1624 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358371620124696\",\"model\":\"SM-T735\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52RA0CMECX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CHO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2603\"}'\'' -e'"" [2025-08-22 13:04:18][351735150437602][0 ms][INFO] === Request start === [2025-08-22 13:04:19][358371620124696][7575 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3278cf25-9dd5-4553-a89e-2e2f992acad7","id":"QR_3278cf25-9dd5-4553-a89e-2e2f992acad7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:04:19][358371620124696][7731 ms][DEBUG] proc_open done in 6107 ms; code=255; res.len=3152 [2025-08-22 13:04:19][358371620124696][7731 ms][DEBUG] END runCmdUntilRes#1 in 6107 ms [2025-08-22 13:04:19][358371620124696][7731 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:04:20][351735150437602][2018 ms][DEBUG] START check_scloud [2025-08-22 13:04:20][351735150437602][2018 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:04:20][351735150437602][2330 ms][DEBUG] SU: done in 312 ms; outu0_a118 17747 4972 24988168 218960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:04:20][351735150437602][2330 ms][DEBUG] targetPkg: running [2025-08-22 13:04:20][351735150437602][2331 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 13:04:20][351735150437602][2331 ms][DEBUG] START check_boot_completed [2025-08-22 13:04:20][351735150437602][2331 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:04:20][351735150437602][2362 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:04:20][351735150437602][2362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:04:20][351735150437602][2409 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:04:20][351735150437602][2409 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:04:20][351735150437602][2409 ms][DEBUG] START check_internet [2025-08-22 13:04:20][351735150437602][2409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:04:20][351735150437602][2643 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.183/138.183/138.183/0.000 ms\n [2025-08-22 13:04:20][351735150437602][2643 ms][DEBUG] check_internet: online [2025-08-22 13:04:20][351735150437602][2644 ms][DEBUG] END check_internet in 235 ms [2025-08-22 13:04:20][351735150437602][2644 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:04:20][351735150437602][2644 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351735150437602\",\"model\":\"SM-M526B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT5197YLV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5437\"}'\'' -e'"" [2025-08-22 13:04:20][351735150437602][2644 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:04:20][351735150437602][2644 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351735150437602\",\"model\":\"SM-M526B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT5197YLV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5437\"}'\'' -e'"" [2025-08-22 13:04:24][351735150437602][6548 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77e8b80a-84c0-45ea-a559-793a1c1d8c53","id":"QR_77e8b80a-84c0-45ea-a559-793a1c1d8c53","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:04:24][351735150437602][6704 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3152 [2025-08-22 13:04:24][351735150437602][6704 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-22 13:04:24][351735150437602][6704 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:07:34][351270417605627][1 ms][INFO] === Request start === [2025-08-22 13:07:34][351270417605627][2 ms][DEBUG] START check_scloud [2025-08-22 13:07:34][351270417605627][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:07:34][351270417605627][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 17747 4972 25118372 230256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:07:34][351270417605627][311 ms][DEBUG] targetPkg: running [2025-08-22 13:07:34][351270417605627][311 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 13:07:34][351270417605627][311 ms][DEBUG] START check_boot_completed [2025-08-22 13:07:34][351270417605627][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:07:34][351270417605627][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:07:34][351270417605627][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:07:34][351270417605627][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:07:34][351270417605627][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:07:34][351270417605627][420 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:07:34][351270417605627][420 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270417605627\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T70QZJ5T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3883\"}'\'' -e'"" [2025-08-22 13:07:34][351270417605627][420 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:07:34][351270417605627][420 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270417605627\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T70QZJ5T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3883\"}'\'' -e'"" [2025-08-22 13:07:38][351270417605627][4419 ms][DEBUG] proc_open done in 3999 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 13:07:38][351270417605627][4419 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-22 13:07:38][351270417605627][4419 ms][WARN] Detected error: Process with pid 17747 either refused to load frida-agent, or terminated during injection [2025-08-22 13:07:38][351270417605627][4419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:07:39][351270417605627][4560 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 13:07:39][351270417605627][4560 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:07:39][351270417605627][4560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:07:39][351270417605627][4685 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 13:07:39][351270417605627][4685 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:07:39][351270417605627][4857 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:07:41][351270417605627][6872 ms][DEBUG] START check_boot_completed [2025-08-22 13:07:41][351270417605627][6872 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:07:41][351270417605627][6918 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:07:41][351270417605627][6918 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:07:41][351270417605627][6965 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:07:41][351270417605627][6965 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:07:44][351270417605627][9980 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:07:44][351270417605627][9980 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270417605627\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T70QZJ5T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3883\"}'\'' -e'"" [2025-08-22 13:07:48][351270417605627][14276 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5215bbf8-f475-4a03-9702-13090b29387d","id":"QR_5215bbf8-f475-4a03-9702-13090b29387d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:07:48][351270417605627][14432 ms][DEBUG] proc_open done in 4452 ms; code=255; res.len=3152 [2025-08-22 13:07:48][351270417605627][14432 ms][DEBUG] END runCmdUntilRes#2 in 4452 ms [2025-08-22 13:07:48][351270417605627][14432 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:09:07][358778101217395][0 ms][INFO] === Request start === [2025-08-22 13:09:07][358778101217395][1 ms][DEBUG] START check_scloud [2025-08-22 13:09:07][358778101217395][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:09:08][358778101217395][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19632 4972 23649044 126984 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:09:08][358778101217395][310 ms][DEBUG] targetPkg: running [2025-08-22 13:09:08][358778101217395][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 13:09:08][358778101217395][310 ms][DEBUG] START check_boot_completed [2025-08-22 13:09:08][358778101217395][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:09:08][358778101217395][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:09:08][358778101217395][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:09:08][358778101217395][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:09:08][358778101217395][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:09:08][358778101217395][404 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:09:08][358778101217395][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358778101217395\",\"model\":\"SM-N971N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CM90CX2XA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOD\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1554\"}'\'' -e'"" [2025-08-22 13:09:08][358778101217395][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:09:08][358778101217395][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358778101217395\",\"model\":\"SM-N971N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CM90CX2XA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOD\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1554\"}'\'' -e'"" [2025-08-22 13:09:12][358778101217395][4434 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5016835a-8109-47af-8f64-84c7e8e3deab","id":"QR_5016835a-8109-47af-8f64-84c7e8e3deab","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:09:12][358778101217395][4590 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3152 [2025-08-22 13:09:12][358778101217395][4590 ms][DEBUG] END runCmdUntilRes#1 in 4187 ms [2025-08-22 13:09:12][358778101217395][4590 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:13:08][352404917665869][1 ms][INFO] === Request start === [2025-08-22 13:13:08][352404917665869][2 ms][DEBUG] START check_scloud [2025-08-22 13:13:08][352404917665869][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:13:08][352404917665869][278 ms][DEBUG] SU: done in 276 ms; outu0_a118 19632 4972 23762888 138044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:13:08][352404917665869][278 ms][DEBUG] targetPkg: running [2025-08-22 13:13:08][352404917665869][278 ms][DEBUG] END check_scloud in 276 ms [2025-08-22 13:13:08][352404917665869][278 ms][DEBUG] START check_boot_completed [2025-08-22 13:13:08][352404917665869][278 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:13:08][352404917665869][309 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:13:08][352404917665869][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:13:08][352404917665869][356 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:13:08][352404917665869][356 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:13:08][352404917665869][356 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:13:08][352404917665869][356 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352404917665869\",\"model\":\"SM-S911B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW60DLDKW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8706\"}'\'' -e'"" [2025-08-22 13:13:08][352404917665869][356 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:13:08][352404917665869][356 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352404917665869\",\"model\":\"SM-S911B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW60DLDKW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8706\"}'\'' -e'"" [2025-08-22 13:13:13][352404917665869][4746 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_497db4eb-7cc4-43fb-aaee-80fd4673f7e2","id":"QR_497db4eb-7cc4-43fb-aaee-80fd4673f7e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:13:13][352404917665869][4902 ms][DEBUG] proc_open done in 4546 ms; code=255; res.len=3152 [2025-08-22 13:13:13][352404917665869][4902 ms][DEBUG] END runCmdUntilRes#1 in 4546 ms [2025-08-22 13:13:13][352404917665869][4902 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:14:06][353600815036603][0 ms][INFO] === Request start === [2025-08-22 13:14:06][353600815036603][1 ms][DEBUG] START check_scloud [2025-08-22 13:14:06][353600815036603][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:14:07][353600815036603][259 ms][DEBUG] SU: done in 258 ms; outu0_a118 19632 4972 23898148 149648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:14:07][353600815036603][259 ms][DEBUG] targetPkg: running [2025-08-22 13:14:07][353600815036603][259 ms][DEBUG] END check_scloud in 258 ms [2025-08-22 13:14:07][353600815036603][259 ms][DEBUG] START check_boot_completed [2025-08-22 13:14:07][353600815036603][259 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:14:07][353600815036603][306 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:14:07][353600815036603][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:14:07][353600815036603][369 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:14:07][353600815036603][369 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:14:07][353600815036603][369 ms][DEBUG] START check_internet [2025-08-22 13:14:07][353600815036603][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:14:07][353600815036603][837 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.016/200.016/200.016/0.000 ms\n [2025-08-22 13:14:07][353600815036603][837 ms][DEBUG] check_internet: online [2025-08-22 13:14:07][353600815036603][837 ms][DEBUG] END check_internet in 469 ms [2025-08-22 13:14:07][353600815036603][838 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:14:07][353600815036603][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815036603\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8TA032RPF\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6107\"}'\'' -e'"" [2025-08-22 13:14:07][353600815036603][838 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:14:07][353600815036603][838 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600815036603\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8TA032RPF\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6107\"}'\'' -e'"" [2025-08-22 13:14:13][353600815036603][7023 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dbc2ca24-900c-4a27-b00a-d25f738c6897","id":"QR_dbc2ca24-900c-4a27-b00a-d25f738c6897","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:14:13][353600815036603][7179 ms][DEBUG] proc_open done in 6341 ms; code=255; res.len=3152 [2025-08-22 13:14:13][353600815036603][7179 ms][DEBUG] END runCmdUntilRes#1 in 6341 ms [2025-08-22 13:14:13][353600815036603][7179 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:18:04][357211243397512][1 ms][INFO] === Request start === [2025-08-22 13:18:04][357211243397512][2 ms][DEBUG] START check_scloud [2025-08-22 13:18:04][357211243397512][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:18:04][357211243397512][276 ms][DEBUG] SU: done in 274 ms; outu0_a118 19632 4972 24025316 161292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:18:04][357211243397512][276 ms][DEBUG] targetPkg: running [2025-08-22 13:18:04][357211243397512][276 ms][DEBUG] END check_scloud in 274 ms [2025-08-22 13:18:04][357211243397512][276 ms][DEBUG] START check_boot_completed [2025-08-22 13:18:04][357211243397512][276 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:18:04][357211243397512][307 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:18:04][357211243397512][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:18:04][357211243397512][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:18:04][357211243397512][354 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:18:04][357211243397512][354 ms][DEBUG] START check_internet [2025-08-22 13:18:04][357211243397512][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:18:04][357211243397512][838 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.082/200.082/200.082/0.000 ms\n [2025-08-22 13:18:04][357211243397512][838 ms][DEBUG] check_internet: online [2025-08-22 13:18:04][357211243397512][838 ms][DEBUG] END check_internet in 484 ms [2025-08-22 13:18:04][357211243397512][838 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:18:04][357211243397512][838 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211243397512\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T80NSM0P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5516\"}'\'' -e'"" [2025-08-22 13:18:04][357211243397512][838 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:18:04][357211243397512][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357211243397512\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T80NSM0P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5516\"}'\'' -e'"" [2025-08-22 13:18:09][357211243397512][4962 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7a5bc74c-cb60-4d91-bb41-e0029218c094","id":"QR_7a5bc74c-cb60-4d91-bb41-e0029218c094","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:18:09][357211243397512][5118 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3152 [2025-08-22 13:18:09][357211243397512][5118 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 13:18:09][357211243397512][5118 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:18:12][352967350617449][0 ms][INFO] === Request start === [2025-08-22 13:18:12][352967350617449][1 ms][DEBUG] START check_scloud [2025-08-22 13:18:12][352967350617449][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:18:12][352967350617449][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 19632 4972 24175404 171840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:18:12][352967350617449][310 ms][DEBUG] targetPkg: running [2025-08-22 13:18:12][352967350617449][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 13:18:12][352967350617449][310 ms][DEBUG] START check_boot_completed [2025-08-22 13:18:12][352967350617449][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:18:12][352967350617449][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:18:12][352967350617449][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:18:12][352967350617449][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:18:12][352967350617449][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:18:12][352967350617449][403 ms][DEBUG] START check_internet [2025-08-22 13:18:12][352967350617449][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:18:12][352967350617449][653 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.645/139.645/139.645/0.000 ms\n [2025-08-22 13:18:12][352967350617449][653 ms][DEBUG] check_internet: online [2025-08-22 13:18:12][352967350617449][653 ms][DEBUG] END check_internet in 250 ms [2025-08-22 13:18:12][352967350617449][654 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:18:12][352967350617449][654 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967350617449\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8TA0A5JQN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9869\"}'\'' -e'"" [2025-08-22 13:18:12][352967350617449][654 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:18:12][352967350617449][654 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967350617449\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8TA0A5JQN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9869\"}'\'' -e'"" [2025-08-22 13:18:21][352967350617449][9073 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a23772ca-4625-4a19-a4d6-f975535d1177","id":"QR_a23772ca-4625-4a19-a4d6-f975535d1177","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:18:21][352967350617449][9229 ms][DEBUG] proc_open done in 8575 ms; code=255; res.len=3152 [2025-08-22 13:18:21][352967350617449][9229 ms][DEBUG] END runCmdUntilRes#1 in 8576 ms [2025-08-22 13:18:21][352967350617449][9229 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:21:06][351771202428125][1 ms][INFO] === Request start === [2025-08-22 13:21:06][351771202428125][2 ms][DEBUG] START check_scloud [2025-08-22 13:21:06][351771202428125][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:21:06][351771202428125][265 ms][DEBUG] SU: done in 263 ms; outu0_a118 19632 4972 24324076 183804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:21:06][351771202428125][265 ms][DEBUG] targetPkg: running [2025-08-22 13:21:06][351771202428125][265 ms][DEBUG] END check_scloud in 264 ms [2025-08-22 13:21:06][351771202428125][265 ms][DEBUG] START check_boot_completed [2025-08-22 13:21:06][351771202428125][265 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:21:06][351771202428125][327 ms][DEBUG] ADB: done in 62 ms; out [2025-08-22 13:21:06][351771202428125][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:21:06][351771202428125][374 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:21:06][351771202428125][374 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:21:06][351771202428125][374 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:21:06][351771202428125][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771202428125\",\"model\":\"SM-X306B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52XB06H8GB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7800\"}'\'' -e'"" [2025-08-22 13:21:06][351771202428125][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:21:06][351771202428125][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771202428125\",\"model\":\"SM-X306B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52XB06H8GB\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7800\"}'\'' -e'"" [2025-08-22 13:21:10][351771202428125][4389 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d57d0e9c-d725-49b2-b091-eef4fdba805c","id":"QR_d57d0e9c-d725-49b2-b091-eef4fdba805c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:21:10][351771202428125][4545 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3152 [2025-08-22 13:21:10][351771202428125][4545 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-22 13:21:10][351771202428125][4545 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:21:50][351235160638778][1 ms][INFO] === Request start === [2025-08-22 13:21:50][351235160638778][2 ms][DEBUG] START check_scloud [2025-08-22 13:21:50][351235160638778][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:21:50][351235160638778][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 19632 4972 24433744 191100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:21:50][351235160638778][304 ms][DEBUG] targetPkg: running [2025-08-22 13:21:50][351235160638778][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 13:21:50][351235160638778][304 ms][DEBUG] START check_boot_completed [2025-08-22 13:21:50][351235160638778][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:21:50][351235160638778][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:21:50][351235160638778][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:21:51][351235160638778][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:21:51][351235160638778][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:21:51][351235160638778][413 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:21:51][351235160638778][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351235160638778\",\"model\":\"SM-S921B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX305DSBM\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3459\"}'\'' -e'"" [2025-08-22 13:21:51][351235160638778][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:21:51][351235160638778][414 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351235160638778\",\"model\":\"SM-S921B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX305DSBM\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3459\"}'\'' -e'"" [2025-08-22 13:21:56][351235160638778][5662 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9f843bfb-746f-4469-bb56-db52a04e71e8","id":"QR_9f843bfb-746f-4469-bb56-db52a04e71e8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:21:56][351235160638778][5818 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3152 [2025-08-22 13:21:56][351235160638778][5818 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-08-22 13:21:56][351235160638778][5818 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:24:10][352192664296026][1 ms][INFO] === Request start === [2025-08-22 13:24:10][352192664296026][2 ms][DEBUG] START check_scloud [2025-08-22 13:24:10][352192664296026][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:24:10][352192664296026][295 ms][DEBUG] SU: done in 293 ms; outu0_a118 19632 4972 24573108 189916 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:24:10][352192664296026][295 ms][DEBUG] targetPkg: running [2025-08-22 13:24:10][352192664296026][295 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 13:24:10][352192664296026][295 ms][DEBUG] START check_boot_completed [2025-08-22 13:24:10][352192664296026][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:24:10][352192664296026][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:24:10][352192664296026][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:24:11][352192664296026][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:24:11][352192664296026][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:24:11][352192664296026][373 ms][DEBUG] START check_internet [2025-08-22 13:24:11][352192664296026][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:24:11][352192664296026][841 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.676/201.676/201.676/0.000 ms\n [2025-08-22 13:24:11][352192664296026][841 ms][DEBUG] check_internet: online [2025-08-22 13:24:11][352192664296026][841 ms][DEBUG] END check_internet in 469 ms [2025-08-22 13:24:11][352192664296026][841 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:24:11][352192664296026][841 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664296026\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T40PNGCL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9686\"}'\'' -e'"" [2025-08-22 13:24:11][352192664296026][841 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:24:11][352192664296026][841 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352192664296026\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T40PNGCL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9686\"}'\'' -e'"" [2025-08-22 13:24:15][351460450178919][1 ms][INFO] === Request start === [2025-08-22 13:24:16][352192664296026][5481 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_69a80d1b-4386-49b3-8061-6b02afdf1bc8","id":"QR_69a80d1b-4386-49b3-8061-6b02afdf1bc8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:24:16][352192664296026][5637 ms][DEBUG] proc_open done in 4796 ms; code=255; res.len=3152 [2025-08-22 13:24:16][352192664296026][5637 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-08-22 13:24:16][352192664296026][5637 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:24:16][351460450178919][1017 ms][DEBUG] START check_scloud [2025-08-22 13:24:16][351460450178919][1017 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:24:17][351460450178919][1314 ms][DEBUG] SU: done in 297 ms; outu0_a118 19632 4972 24752572 182344 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:24:17][351460450178919][1314 ms][DEBUG] targetPkg: running [2025-08-22 13:24:17][351460450178919][1314 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 13:24:17][351460450178919][1314 ms][DEBUG] START check_boot_completed [2025-08-22 13:24:17][351460450178919][1314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:24:17][351460450178919][1360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:24:17][351460450178919][1361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:24:17][351460450178919][1423 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:24:17][351460450178919][1423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:24:17][351460450178919][1423 ms][DEBUG] START check_internet [2025-08-22 13:24:17][351460450178919][1423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:24:17][351460450178919][1673 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.236/134.236/134.236/0.000 ms\n [2025-08-22 13:24:17][351460450178919][1673 ms][DEBUG] check_internet: online [2025-08-22 13:24:17][351460450178919][1673 ms][DEBUG] END check_internet in 250 ms [2025-08-22 13:24:17][351460450178919][1673 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:24:17][351460450178919][1673 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8810\"}'\'' -e'"" [2025-08-22 13:24:17][351460450178919][1673 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:24:17][351460450178919][1673 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351460450178919\",\"model\":\"SM-A156M\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX106135W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8810\"}'\'' -e'"" [2025-08-22 13:24:21][351460450178919][5344 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e2a6b4c1-fa8d-49fc-a665-a5aae1747f1b","id":"QR_e2a6b4c1-fa8d-49fc-a665-a5aae1747f1b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:24:21][351460450178919][5500 ms][DEBUG] proc_open done in 3827 ms; code=255; res.len=3152 [2025-08-22 13:24:21][351460450178919][5500 ms][DEBUG] END runCmdUntilRes#1 in 3827 ms [2025-08-22 13:24:21][351460450178919][5500 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:26:40][352019880687623][1 ms][INFO] === Request start === [2025-08-22 13:26:40][352019880687623][2 ms][DEBUG] START check_scloud [2025-08-22 13:26:40][352019880687623][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:26:40][352019880687623][256 ms][DEBUG] SU: done in 254 ms; outu0_a118 19632 4972 24872572 194340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:26:40][352019880687623][256 ms][DEBUG] targetPkg: running [2025-08-22 13:26:40][352019880687623][256 ms][DEBUG] END check_scloud in 254 ms [2025-08-22 13:26:40][352019880687623][256 ms][DEBUG] START check_boot_completed [2025-08-22 13:26:40][352019880687623][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:26:40][352019880687623][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:26:40][352019880687623][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:26:40][352019880687623][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:26:40][352019880687623][349 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:26:40][352019880687623][349 ms][DEBUG] START check_internet [2025-08-22 13:26:40][352019880687623][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:26:41][352019880687623][802 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.311/201.311/201.311/0.000 ms\n [2025-08-22 13:26:41][352019880687623][803 ms][DEBUG] check_internet: online [2025-08-22 13:26:41][352019880687623][803 ms][DEBUG] END check_internet in 453 ms [2025-08-22 13:26:41][352019880687623][803 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:26:41][352019880687623][803 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019880687623\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCWA097BQX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6451\"}'\'' -e'"" [2025-08-22 13:26:41][352019880687623][803 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:26:41][352019880687623][803 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352019880687623\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCWA097BQX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6451\"}'\'' -e'"" [2025-08-22 13:26:46][352019880687623][5848 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51d442a7-4b5a-4855-a7aa-801f774ffcf3","id":"QR_51d442a7-4b5a-4855-a7aa-801f774ffcf3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:26:46][352019880687623][6004 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3152 [2025-08-22 13:26:46][352019880687623][6004 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-22 13:26:46][352019880687623][6004 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:26:59][350938280475739][0 ms][INFO] === Request start === [2025-08-22 13:26:59][350938280475739][1 ms][DEBUG] START check_scloud [2025-08-22 13:26:59][350938280475739][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:26:59][350938280475739][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 19632 4972 25009032 205024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:26:59][350938280475739][273 ms][DEBUG] targetPkg: running [2025-08-22 13:26:59][350938280475739][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-22 13:26:59][350938280475739][273 ms][DEBUG] START check_boot_completed [2025-08-22 13:26:59][350938280475739][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:26:59][350938280475739][318 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 13:26:59][350938280475739][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:26:59][350938280475739][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:26:59][350938280475739][365 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 13:26:59][350938280475739][365 ms][DEBUG] START check_internet [2025-08-22 13:26:59][350938280475739][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:27:00][350938280475739][693 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=221 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 221.741/221.741/221.741/0.000 ms\n [2025-08-22 13:27:00][350938280475739][693 ms][DEBUG] check_internet: online [2025-08-22 13:27:00][350938280475739][693 ms][DEBUG] END check_internet in 328 ms [2025-08-22 13:27:00][350938280475739][693 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:27:00][350938280475739][693 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280475739\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58XB0QYSGP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2655\"}'\'' -e'"" [2025-08-22 13:27:00][350938280475739][693 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:27:00][350938280475739][693 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280475739\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58XB0QYSGP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2655\"}'\'' -e'"" [2025-08-22 13:27:08][350938280475739][8738 ms][DEBUG] proc_open done in 8045 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 13:27:08][350938280475739][8738 ms][DEBUG] END runCmdUntilRes#1 in 8045 ms [2025-08-22 13:27:08][350938280475739][8738 ms][WARN] Detected error: Process with pid 19632 either refused to load frida-agent, or terminated during injection [2025-08-22 13:27:08][350938280475739][8738 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:27:08][350938280475739][8957 ms][DEBUG] SU: done in 218 ms; out [2025-08-22 13:27:08][350938280475739][8957 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:27:08][350938280475739][8957 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:27:08][350938280475739][9207 ms][DEBUG] SU: done in 250 ms; out [2025-08-22 13:27:08][350938280475739][9207 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:27:09][350938280475739][9644 ms][DEBUG] SU: done in 437 ms; out [2025-08-22 13:27:11][350938280475739][11659 ms][DEBUG] START check_boot_completed [2025-08-22 13:27:11][350938280475739][11659 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:27:11][350938280475739][11706 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:27:11][350938280475739][11706 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:27:11][350938280475739][11784 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:27:11][350938280475739][11784 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 13:27:14][350938280475739][14799 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:27:14][350938280475739][14799 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280475739\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58XB0QYSGP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2655\"}'\'' -e'"" [2025-08-22 13:27:15][350938280475739][16283 ms][DEBUG] proc_open done in 1484 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-22 13:27:15][350938280475739][16283 ms][DEBUG] END runCmdUntilRes#2 in 1484 ms [2025-08-22 13:27:15][350938280475739][16283 ms][WARN] Detected error 2; Reboot the device [2025-08-22 13:27:15][350938280475739][16283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 13:27:16][350938280475739][16939 ms][DEBUG] SU: done in 656 ms; out [2025-08-22 13:27:28][350536251631759][0 ms][INFO] === Request start === [2025-08-22 13:27:28][350536251631759][1 ms][DEBUG] START check_scloud [2025-08-22 13:27:28][350536251631759][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:27:28][350938280475739][0 ms][INFO] === Request start === [2025-08-22 13:27:28][350938280475739][0 ms][DEBUG] START check_scloud [2025-08-22 13:27:28][350938280475739][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:27:28][350536251631759][42 ms][DEBUG] SU: done in 41 ms; out [2025-08-22 13:27:28][350536251631759][42 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:27:28][350536251631759][42 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:27:28][350536251631759][74 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:27:28][350938280475739][39 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:27:28][350938280475739][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" nterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:27:28][350938280475739][70 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:27:28][350938280475739][70 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:27:28][350938280475739][101 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:27:30][350536251631759][2120 ms][DEBUG] END check_scloud in 2119 ms [2025-08-22 13:27:30][350536251631759][2120 ms][DEBUG] START check_boot_completed [2025-08-22 13:27:30][350536251631759][2120 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:27:30][350938280475739][2116 ms][DEBUG] END check_scloud in 2116 ms [2025-08-22 13:27:30][350938280475739][2116 ms][DEBUG] START check_boot_completed [2025-08-22 13:27:30][350938280475739][2116 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:27:52][356591851122521][1 ms][INFO] === Request start === [2025-08-22 13:28:09][356591851122521][0 ms][INFO] === Request start === [2025-08-22 13:28:17][356591851122521][8106 ms][DEBUG] START check_scloud [2025-08-22 13:28:17][356591851122521][8106 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:28:17][356591851122521][8450 ms][DEBUG] SU: done in 344 ms; out [2025-08-22 13:28:17][356591851122521][8450 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:28:17][356591851122521][8450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:28:18][356591851122521][8622 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 13:28:18][356591851122521][8622 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:28:18][356591851122521][8809 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:28:18][350536251631759][0 ms][INFO] === Request start === [2025-08-22 13:28:20][356591851122521][10824 ms][DEBUG] END check_scloud in 2718 ms [2025-08-22 13:28:20][356591851122521][10824 ms][DEBUG] START check_boot_completed [2025-08-22 13:28:20][356591851122521][10824 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:28:22][356591851122521][12884 ms][DEBUG] ADB: done in 2060 ms; out [2025-08-22 13:28:22][356591851122521][12884 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:28:22][356591851122521][12947 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:28:22][356591851122521][12947 ms][DEBUG] END check_boot_completed in 2122 ms [2025-08-22 13:28:22][356591851122521][12947 ms][DEBUG] START check_internet [2025-08-22 13:28:22][356591851122521][12947 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:28:22][356591851122521][13056 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 13:28:22][356591851122521][13056 ms][WARN] check_internet: offline [2025-08-22 13:28:22][356591851122521][13056 ms][DEBUG] END check_internet in 110 ms [2025-08-22 13:28:22][350536251631759][4047 ms][DEBUG] START check_scloud [2025-08-22 13:28:22][350536251631759][4047 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:28:23][350536251631759][4360 ms][DEBUG] SU: done in 313 ms; out [2025-08-22 13:28:23][350536251631759][4360 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:28:23][350536251631759][4360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:28:23][350536251631759][4532 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 13:28:23][350536251631759][4532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:28:23][350536251631759][4688 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:28:25][350536251631759][6703 ms][DEBUG] END check_scloud in 2656 ms [2025-08-22 13:28:25][350536251631759][6703 ms][DEBUG] START check_boot_completed [2025-08-22 13:28:25][350536251631759][6703 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:28:25][350536251631759][6750 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:28:25][350536251631759][6750 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:28:25][350536251631759][6843 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 13:28:25][350536251631759][6843 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-22 13:28:25][350536251631759][6843 ms][DEBUG] START check_internet [2025-08-22 13:28:25][350536251631759][6844 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:28:25][350536251631759][7250 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=145 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 145.327/145.327/145.327/0.000 ms\n [2025-08-22 13:28:25][350536251631759][7250 ms][DEBUG] check_internet: online [2025-08-22 13:28:25][350536251631759][7250 ms][DEBUG] END check_internet in 406 ms [2025-08-22 13:28:25][350536251631759][7250 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:28:25][350536251631759][7250 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536251631759\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T60R2FNJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1925\"}'\'' -e'"" [2025-08-22 13:28:25][350536251631759][7250 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:28:25][350536251631759][7250 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536251631759\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T60R2FNJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1925\"}'\'' -e'"" [2025-08-22 13:28:26][356591851122521][1 ms][INFO] === Request start === [2025-08-22 13:28:26][356591851122521][1 ms][DEBUG] START check_scloud [2025-08-22 13:28:26][356591851122521][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:28:27][356591851122521][998 ms][DEBUG] SU: done in 996 ms; out [2025-08-22 13:28:27][356591851122521][998 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:28:27][356591851122521][998 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:28:27][356591851122521][1388 ms][DEBUG] SU: done in 390 ms; out [2025-08-22 13:28:27][356591851122521][1388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:28:28][356591851122521][2185 ms][DEBUG] SU: done in 797 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:28:30][356591851122521][4200 ms][DEBUG] END check_scloud in 4199 ms [2025-08-22 13:28:30][356591851122521][4200 ms][DEBUG] START check_boot_completed [2025-08-22 13:28:30][356591851122521][4200 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:28:30][356591851122521][4247 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:28:30][356591851122521][4247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:28:30][356591851122521][4357 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 13:28:30][356591851122521][4357 ms][DEBUG] END check_boot_completed in 156 ms [2025-08-22 13:28:30][356591851122521][4357 ms][DEBUG] START check_internet [2025-08-22 13:28:30][356591851122521][4357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:28:31][356591851122521][4747 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=166 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 166.107/166.107/166.107/0.000 ms\n [2025-08-22 13:28:31][356591851122521][4747 ms][DEBUG] check_internet: online [2025-08-22 13:28:31][356591851122521][4747 ms][DEBUG] END check_internet in 391 ms [2025-08-22 13:28:31][356591851122521][4747 ms][DEBUG] rawBody.length=1150 [2025-08-22 13:28:31][356591851122521][4747 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356591851122521\",\"model\":\"SM-S918N\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6946\"}'\'' -e'"" [2025-08-22 13:28:31][356591851122521][4747 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:28:31][356591851122521][4747 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356591851122521\",\"model\":\"SM-S918N\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6946\"}'\'' -e'"" [2025-08-22 13:28:32][356591851122521][6247 ms][DEBUG] proc_open done in 1499 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-22 13:28:32][356591851122521][6247 ms][DEBUG] END runCmdUntilRes#1 in 1499 ms [2025-08-22 13:28:32][356591851122521][6247 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5387 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5387 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-22 13:28:33][350536251631759][14607 ms][DEBUG] proc_open done in 7357 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 13:28:33][350536251631759][14608 ms][DEBUG] END runCmdUntilRes#1 in 7357 ms [2025-08-22 13:28:33][350536251631759][14608 ms][WARN] Detected error: Process not found [2025-08-22 13:28:33][350536251631759][14608 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:28:33][350536251631759][14795 ms][DEBUG] SU: done in 187 ms; out [2025-08-22 13:28:33][350536251631759][14795 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:28:33][350536251631759][14795 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:28:33][350536251631759][15060 ms][DEBUG] SU: done in 265 ms; out [2025-08-22 13:28:33][350536251631759][15060 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:28:34][356591851122521][0 ms][INFO] === Request start === [2025-08-22 13:28:34][350536251631759][15546 ms][DEBUG] SU: done in 486 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:28:36][350536251631759][17560 ms][DEBUG] START check_boot_completed [2025-08-22 13:28:36][350536251631759][17560 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:28:36][350536251631759][17607 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:28:36][350536251631759][17607 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:28:36][350536251631759][17653 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:28:36][350536251631759][17653 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:28:39][350536251631759][20668 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:28:39][350536251631759][20668 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350536251631759\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T60R2FNJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1925\"}'\'' -e'"" [2025-08-22 13:28:44][350536251631759][26214 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94677cd7-77e6-4328-af77-c3a5cecf9bb4","id":"QR_94677cd7-77e6-4328-af77-c3a5cecf9bb4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:28:45][350536251631759][26370 ms][DEBUG] proc_open done in 5702 ms; code=255; res.len=3152 [2025-08-22 13:28:45][350536251631759][26370 ms][DEBUG] END runCmdUntilRes#2 in 5702 ms [2025-08-22 13:28:45][350536251631759][26370 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:28:45][356591851122521][11161 ms][DEBUG] START check_scloud [2025-08-22 13:28:45][356591851122521][11161 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:28:45][356591851122521][11582 ms][DEBUG] SU: done in 422 ms; outu0_a118 9357 4967 23523004 108516 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:28:45][356591851122521][11583 ms][DEBUG] targetPkg: running [2025-08-22 13:28:45][356591851122521][11583 ms][DEBUG] END check_scloud in 422 ms [2025-08-22 13:28:45][356591851122521][11583 ms][DEBUG] START check_boot_completed [2025-08-22 13:28:45][356591851122521][11583 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:28:45][356591851122521][11629 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:28:45][356591851122521][11629 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:28:45][356591851122521][11707 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:28:45][356591851122521][11707 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 13:28:45][356591851122521][11708 ms][DEBUG] START check_internet [2025-08-22 13:28:45][356591851122521][11708 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:28:46][356591851122521][11988 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=128 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 128.304/128.304/128.304/0.000 ms\n [2025-08-22 13:28:46][356591851122521][11988 ms][DEBUG] check_internet: online [2025-08-22 13:28:46][356591851122521][11988 ms][DEBUG] END check_internet in 281 ms [2025-08-22 13:28:46][356591851122521][11988 ms][DEBUG] rawBody.length=1150 [2025-08-22 13:28:46][356591851122521][11989 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356591851122521\",\"model\":\"SM-S918N\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6946\"}'\'' -e'"" [2025-08-22 13:28:46][356591851122521][11989 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:28:46][356591851122521][11989 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356591851122521\",\"model\":\"SM-S918N\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6946\"}'\'' -e'"" [2025-08-22 13:28:51][356591851122521][17065 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c083364c-1396-4538-a1cc-288a24572eff","id":"QR_c083364c-1396-4538-a1cc-288a24572eff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:28:51][356591851122521][17221 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3152 [2025-08-22 13:28:51][356591851122521][17222 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-22 13:28:51][356591851122521][17222 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:28:54][352737403180830][0 ms][INFO] === Request start === [2025-08-22 13:28:54][352737403180830][1 ms][DEBUG] START check_scloud [2025-08-22 13:28:54][352737403180830][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:28:54][352737403180830][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 9357 4967 23701008 94980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:28:54][352737403180830][314 ms][DEBUG] targetPkg: running [2025-08-22 13:28:54][352737403180830][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 13:28:54][352737403180830][314 ms][DEBUG] START check_boot_completed [2025-08-22 13:28:54][352737403180830][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:28:54][352737403180830][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:28:54][352737403180830][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:28:54][352737403180830][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:28:54][352737403180830][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:28:54][352737403180830][408 ms][DEBUG] START check_internet [2025-08-22 13:28:54][352737403180830][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:28:54][352737403180830][769 ms][DEBUG] SU: done in 361 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.690/252.690/252.690/0.000 ms\n [2025-08-22 13:28:54][352737403180830][769 ms][DEBUG] check_internet: online [2025-08-22 13:28:54][352737403180830][769 ms][DEBUG] END check_internet in 361 ms [2025-08-22 13:28:54][352737403180830][769 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:28:54][352737403180830][769 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737403180830\",\"model\":\"SM-S926B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX9045GLR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5780\"}'\'' -e'"" [2025-08-22 13:28:54][352737403180830][769 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:28:54][352737403180830][769 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352737403180830\",\"model\":\"SM-S926B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX9045GLR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5780\"}'\'' -e'"" [2025-08-22 13:28:59][352737403180830][4891 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be35f3e7-bf4b-4669-9386-77347df06095","id":"QR_be35f3e7-bf4b-4669-9386-77347df06095","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:28:59][352737403180830][5047 ms][DEBUG] proc_open done in 4278 ms; code=255; res.len=3152 [2025-08-22 13:28:59][352737403180830][5047 ms][DEBUG] END runCmdUntilRes#1 in 4278 ms [2025-08-22 13:28:59][352737403180830][5047 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:32:07][352861160941729][1 ms][INFO] === Request start === [2025-08-22 13:32:07][352861160941729][2 ms][DEBUG] START check_scloud [2025-08-22 13:32:07][352861160941729][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:32:08][352861160941729][352 ms][DEBUG] SU: done in 350 ms; outu0_a118 9357 4967 23741488 66292 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:32:08][352861160941729][352 ms][DEBUG] targetPkg: running [2025-08-22 13:32:08][352861160941729][352 ms][DEBUG] END check_scloud in 350 ms [2025-08-22 13:32:08][352861160941729][352 ms][DEBUG] START check_boot_completed [2025-08-22 13:32:08][352861160941729][352 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:32:08][352861160941729][399 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:32:08][352861160941729][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:32:08][352861160941729][461 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:32:08][352861160941729][461 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:32:08][352861160941729][461 ms][DEBUG] START check_internet [2025-08-22 13:32:08][352861160941729][461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:32:08][352861160941729][977 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.634/201.634/201.634/0.000 ms\n [2025-08-22 13:32:08][352861160941729][977 ms][DEBUG] check_internet: online [2025-08-22 13:32:08][352861160941729][977 ms][DEBUG] END check_internet in 515 ms [2025-08-22 13:32:08][352861160941729][977 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:32:08][352861160941729][977 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861160941729\",\"model\":\"SM-A336N\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT70MT5RJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2187\"}'\'' -e'"" [2025-08-22 13:32:08][352861160941729][977 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:32:08][352861160941729][977 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861160941729\",\"model\":\"SM-A336N\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT70MT5RJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2187\"}'\'' -e'"" [2025-08-22 13:32:11][359687350961794][1 ms][INFO] === Request start === [2025-08-22 13:32:13][352861160941729][6053 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a6df457-ef0d-4c8c-876a-50c8f8ae0b69","id":"QR_0a6df457-ef0d-4c8c-876a-50c8f8ae0b69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:32:13][352861160941729][6210 ms][DEBUG] proc_open done in 5233 ms; code=255; res.len=3152 [2025-08-22 13:32:13][352861160941729][6210 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-22 13:32:13][352861160941729][6210 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:32:14][359687350961794][3045 ms][DEBUG] START check_scloud [2025-08-22 13:32:14][359687350961794][3045 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:32:14][359687350961794][3311 ms][DEBUG] SU: done in 266 ms; outu0_a118 9357 4967 23885944 85252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:32:14][359687350961794][3311 ms][DEBUG] targetPkg: running [2025-08-22 13:32:14][359687350961794][3311 ms][DEBUG] END check_scloud in 266 ms [2025-08-22 13:32:14][359687350961794][3311 ms][DEBUG] START check_boot_completed [2025-08-22 13:32:14][359687350961794][3311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:32:14][359687350961794][3358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:32:14][359687350961794][3358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:32:14][359687350961794][3405 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:32:14][359687350961794][3405 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:32:14][359687350961794][3405 ms][DEBUG] START check_internet [2025-08-22 13:32:14][359687350961794][3405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:32:14][359687350961794][3686 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=144 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 144.467/144.467/144.467/0.000 ms\n [2025-08-22 13:32:14][359687350961794][3686 ms][DEBUG] check_internet: online [2025-08-22 13:32:14][359687350961794][3686 ms][DEBUG] END check_internet in 281 ms [2025-08-22 13:32:14][359687350961794][3686 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:32:14][359687350961794][3686 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359687350961794\",\"model\":\"SM-M556B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9QX504CE3D\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3890\"}'\'' -e'"" [2025-08-22 13:32:14][359687350961794][3686 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:32:14][359687350961794][3686 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359687350961794\",\"model\":\"SM-M556B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9QX504CE3D\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3890\"}'\'' -e'"" [2025-08-22 13:32:19][350290812239625][0 ms][INFO] === Request start === [2025-08-22 13:32:20][359687350961794][9372 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59525184-3a01-49f8-8c3f-8cf20245fe0f","id":"QR_59525184-3a01-49f8-8c3f-8cf20245fe0f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:32:20][359687350961794][9528 ms][DEBUG] proc_open done in 5842 ms; code=255; res.len=3152 [2025-08-22 13:32:20][359687350961794][9528 ms][DEBUG] END runCmdUntilRes#1 in 5842 ms [2025-08-22 13:32:20][359687350961794][9528 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:32:21][350290812239625][2020 ms][DEBUG] START check_scloud [2025-08-22 13:32:21][350290812239625][2021 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:32:21][350290812239625][2333 ms][DEBUG] SU: done in 312 ms; outu0_a118 9357 4967 24067264 96324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:32:21][350290812239625][2333 ms][DEBUG] targetPkg: running [2025-08-22 13:32:21][350290812239625][2333 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 13:32:21][350290812239625][2333 ms][DEBUG] START check_boot_completed [2025-08-22 13:32:21][350290812239625][2333 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:32:21][350290812239625][2364 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:32:21][350290812239625][2364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:32:21][350290812239625][2427 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:32:21][350290812239625][2427 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:32:21][350290812239625][2427 ms][DEBUG] START check_internet [2025-08-22 13:32:21][350290812239625][2427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:32:22][350290812239625][2723 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.654/191.654/191.654/0.000 ms\n [2025-08-22 13:32:22][350290812239625][2723 ms][DEBUG] check_internet: online [2025-08-22 13:32:22][350290812239625][2723 ms][DEBUG] END check_internet in 297 ms [2025-08-22 13:32:22][350290812239625][2723 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:32:22][350290812239625][2723 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812239625\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX40LSHXL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-08-22 13:32:22][350290812239625][2723 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:32:22][350290812239625][2723 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350290812239625\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX40LSHXL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5253\"}'\'' -e'"" [2025-08-22 13:32:25][350290812239625][6597 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9d72a8b1-008e-415a-aff8-36a43c423050","id":"QR_9d72a8b1-008e-415a-aff8-36a43c423050","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:32:26][350290812239625][6754 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3152 [2025-08-22 13:32:26][350290812239625][6754 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-22 13:32:26][350290812239625][6754 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:33:05][351272337605455][0 ms][INFO] === Request start === [2025-08-22 13:33:05][351272337605455][1 ms][DEBUG] START check_scloud [2025-08-22 13:33:05][351272337605455][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:33:05][351272337605455][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 9357 4967 24187164 109876 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:33:05][351272337605455][308 ms][DEBUG] targetPkg: running [2025-08-22 13:33:05][351272337605455][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 13:33:05][351272337605455][308 ms][DEBUG] START check_boot_completed [2025-08-22 13:33:05][351272337605455][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:33:05][351272337605455][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:33:05][351272337605455][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:33:05][351272337605455][433 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:33:05][351272337605455][433 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-22 13:33:05][351272337605455][433 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:33:05][351272337605455][433 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272337605455\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y5083GWY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7155\"}'\'' -e'"" [2025-08-22 13:33:05][351272337605455][433 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:33:05][351272337605455][433 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272337605455\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y5083GWY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7155\"}'\'' -e'"" [2025-08-22 13:33:09][351272337605455][4557 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bed03832-caed-48e7-8378-ed83c94987a8","id":"QR_bed03832-caed-48e7-8378-ed83c94987a8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:33:09][351272337605455][4713 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 13:33:09][351272337605455][4713 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 13:33:09][351272337605455][4713 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:33:26][352795332784346][0 ms][INFO] === Request start === [2025-08-22 13:33:26][352795332784346][1 ms][DEBUG] START check_scloud [2025-08-22 13:33:26][352795332784346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:33:27][352795332784346][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 9357 4967 24321408 120472 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:33:27][352795332784346][318 ms][DEBUG] targetPkg: running [2025-08-22 13:33:27][352795332784346][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 13:33:27][352795332784346][318 ms][DEBUG] START check_boot_completed [2025-08-22 13:33:27][352795332784346][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:33:27][352795332784346][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:33:27][352795332784346][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:33:27][352795332784346][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:33:27][352795332784346][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:33:27][352795332784346][428 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:33:27][352795332784346][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795332784346\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8RA1X548R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MWD\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5934\"}'\'' -e'"" [2025-08-22 13:33:27][352795332784346][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:33:27][352795332784346][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352795332784346\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8RA1X548R\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MWD\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5934\"}'\'' -e'"" [2025-08-22 13:33:31][352795332784346][4536 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e13fbe4c-5200-4fb7-832f-080318621581","id":"QR_e13fbe4c-5200-4fb7-832f-080318621581","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:33:31][352795332784346][4692 ms][DEBUG] proc_open done in 4264 ms; code=255; res.len=3152 [2025-08-22 13:33:31][352795332784346][4692 ms][DEBUG] END runCmdUntilRes#1 in 4264 ms [2025-08-22 13:33:31][352795332784346][4692 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:34:04][351477971162040][0 ms][INFO] === Request start === [2025-08-22 13:34:04][351477971162040][1 ms][DEBUG] START check_scloud [2025-08-22 13:34:04][351477971162040][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:34:04][351477971162040][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 9357 4967 24433124 131372 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:34:04][351477971162040][305 ms][DEBUG] targetPkg: running [2025-08-22 13:34:04][351477971162040][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 13:34:04][351477971162040][305 ms][DEBUG] START check_boot_completed [2025-08-22 13:34:04][351477971162040][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:34:04][351477971162040][382 ms][DEBUG] ADB: done in 77 ms; out [2025-08-22 13:34:04][351477971162040][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:34:04][351477971162040][445 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:34:04][351477971162040][445 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 13:34:04][351477971162040][445 ms][DEBUG] START check_internet [2025-08-22 13:34:04][351477971162040][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:34:05][351477971162040][788 ms][DEBUG] SU: done in 343 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.976/242.976/242.976/0.000 ms\n [2025-08-22 13:34:05][351477971162040][788 ms][DEBUG] check_internet: online [2025-08-22 13:34:05][351477971162040][789 ms][DEBUG] END check_internet in 344 ms [2025-08-22 13:34:05][351477971162040][789 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:34:05][351477971162040][789 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971162040\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB0E1ZHD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-08-22 13:34:05][351477971162040][789 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:34:05][351477971162040][789 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971162040\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB0E1ZHD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"CAU\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8009\"}'\'' -e'"" [2025-08-22 13:34:07][351681598209726][0 ms][INFO] === Request start === [2025-08-22 13:34:09][351477971162040][5037 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ab1e1b1f-aa70-45f1-b9d2-569bb39e9336","id":"QR_ab1e1b1f-aa70-45f1-b9d2-569bb39e9336","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:34:09][351477971162040][5193 ms][DEBUG] proc_open done in 4405 ms; code=255; res.len=3152 [2025-08-22 13:34:09][351477971162040][5193 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-22 13:34:09][351477971162040][5193 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:34:10][351681598209726][3040 ms][DEBUG] START check_scloud [2025-08-22 13:34:10][351681598209726][3041 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:34:10][351681598209726][3337 ms][DEBUG] SU: done in 297 ms; outu0_a118 9357 4967 24598252 142104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:34:10][351681598209726][3338 ms][DEBUG] targetPkg: running [2025-08-22 13:34:10][351681598209726][3338 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 13:34:10][351681598209726][3338 ms][DEBUG] START check_boot_completed [2025-08-22 13:34:10][351681598209726][3338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:34:10][351681598209726][3384 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:34:10][351681598209726][3384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:34:10][351681598209726][3431 ms][DEBUG] SU: done in 46 ms; out [2025-08-22 13:34:10][351681598209726][3431 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:34:10][351681598209726][3431 ms][DEBUG] START check_internet [2025-08-22 13:34:10][351681598209726][3431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:34:11][351681598209726][3666 ms][DEBUG] SU: done in 235 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.594/142.594/142.594/0.000 ms\n [2025-08-22 13:34:11][351681598209726][3666 ms][DEBUG] check_internet: online [2025-08-22 13:34:11][351681598209726][3666 ms][DEBUG] END check_internet in 235 ms [2025-08-22 13:34:11][351681598209726][3666 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:34:11][351681598209726][3666 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681598209726\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X20A1AYJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4574\"}'\'' -e'"" [2025-08-22 13:34:11][351681598209726][3666 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:34:11][351681598209726][3666 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681598209726\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X20A1AYJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4574\"}'\'' -e'"" [2025-08-22 13:34:15][351681598209726][8055 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_6eb7105d-1b27-46f3-b0d7-edf3b584b291","id":"QR_6eb7105d-1b27-46f3-b0d7-edf3b584b291","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:34:15][351681598209726][8211 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3152 [2025-08-22 13:34:15][351681598209726][8211 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-22 13:34:15][351681598209726][8211 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:35:01][351199554760400][1 ms][INFO] === Request start === [2025-08-22 13:35:01][351199554760400][2 ms][DEBUG] START check_scloud [2025-08-22 13:35:01][351199554760400][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:35:01][351199554760400][262 ms][DEBUG] SU: done in 260 ms; outu0_a118 9357 4967 24687532 154056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:35:01][351199554760400][262 ms][DEBUG] targetPkg: running [2025-08-22 13:35:01][351199554760400][262 ms][DEBUG] END check_scloud in 260 ms [2025-08-22 13:35:01][351199554760400][262 ms][DEBUG] START check_boot_completed [2025-08-22 13:35:01][351199554760400][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:35:01][351199554760400][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:35:01][351199554760400][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:35:01][351199554760400][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:35:01][351199554760400][355 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:35:01][351199554760400][355 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:35:01][351199554760400][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554760400\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X907K52K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6123\"}'\'' -e'"" [2025-08-22 13:35:01][351199554760400][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:35:01][351199554760400][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351199554760400\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X907K52K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6123\"}'\'' -e'"" [2025-08-22 13:35:05][351199554760400][4370 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1dd11260-4043-40a8-bab7-f7c8e2d4051f","id":"QR_1dd11260-4043-40a8-bab7-f7c8e2d4051f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:35:05][351199554760400][4526 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3152 [2025-08-22 13:35:05][351199554760400][4526 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-22 13:35:05][351199554760400][4526 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:35:07][357635134240078][0 ms][INFO] === Request start === [2025-08-22 13:35:07][357635134240078][1 ms][DEBUG] START check_scloud [2025-08-22 13:35:07][357635134240078][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:35:07][357635134240078][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 9357 4967 24817844 164700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:35:07][357635134240078][311 ms][DEBUG] targetPkg: running [2025-08-22 13:35:07][357635134240078][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 13:35:07][357635134240078][312 ms][DEBUG] START check_boot_completed [2025-08-22 13:35:07][357635134240078][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:35:07][357635134240078][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:35:07][357635134240078][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:35:07][357635134240078][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:35:07][357635134240078][405 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:35:07][357635134240078][405 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:35:07][357635134240078][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357635134240078\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX202JRLE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2415\"}'\'' -e'"" [2025-08-22 13:35:07][357635134240078][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:35:07][357635134240078][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357635134240078\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX202JRLE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2415\"}'\'' -e'"" [2025-08-22 13:35:12][357635134240078][5029 ms][DEBUG] proc_open done in 4624 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 13:35:12][357635134240078][5029 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-08-22 13:35:12][357635134240078][5029 ms][WARN] Detected error: Process with pid 9357 either refused to load frida-agent, or terminated during injection [2025-08-22 13:35:12][357635134240078][5029 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:35:12][357635134240078][5185 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 13:35:12][357635134240078][5185 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:35:12][357635134240078][5185 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:35:12][357635134240078][5357 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 13:35:12][357635134240078][5357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:35:12][357635134240078][5529 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:35:14][357635134240078][7543 ms][DEBUG] START check_boot_completed [2025-08-22 13:35:14][357635134240078][7544 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:35:14][357635134240078][7590 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:35:14][357635134240078][7590 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:35:14][357635134240078][7637 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:35:14][357635134240078][7637 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:35:17][357635134240078][10652 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:35:17][357635134240078][10652 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357635134240078\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX202JRLE\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2415\"}'\'' -e'"" [2025-08-22 13:35:22][357635134240078][14964 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3df36adf-9da3-4fdc-b279-8bec9e1d010e","id":"QR_3df36adf-9da3-4fdc-b279-8bec9e1d010e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:35:22][357635134240078][15120 ms][DEBUG] proc_open done in 4468 ms; code=255; res.len=3152 [2025-08-22 13:35:22][357635134240078][15120 ms][DEBUG] END runCmdUntilRes#2 in 4468 ms [2025-08-22 13:35:22][357635134240078][15120 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:36:07][353684123094926][0 ms][INFO] === Request start === [2025-08-22 13:36:07][353684123094926][1 ms][DEBUG] START check_scloud [2025-08-22 13:36:07][353684123094926][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:36:07][353684123094926][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 18840 4967 23466508 128844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:36:07][353684123094926][301 ms][DEBUG] targetPkg: running [2025-08-22 13:36:07][353684123094926][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 13:36:07][353684123094926][301 ms][DEBUG] START check_boot_completed [2025-08-22 13:36:07][353684123094926][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:36:07][353684123094926][347 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:36:07][353684123094926][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:36:07][353684123094926][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:36:07][353684123094926][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:36:07][353684123094926][410 ms][DEBUG] START check_internet [2025-08-22 13:36:07][353684123094926][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:36:08][353684123094926][847 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.097/201.097/201.097/0.000 ms\n [2025-08-22 13:36:08][353684123094926][847 ms][DEBUG] check_internet: online [2025-08-22 13:36:08][353684123094926][847 ms][DEBUG] END check_internet in 437 ms [2025-08-22 13:36:08][353684123094926][847 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:36:08][353684123094926][848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123094926\",\"model\":\"SM-N986B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCN800FRRW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1722\"}'\'' -e'"" [2025-08-22 13:36:08][353684123094926][848 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:36:08][353684123094926][848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684123094926\",\"model\":\"SM-N986B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCN800FRRW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1722\"}'\'' -e'"" [2025-08-22 13:36:13][353684123094926][6361 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a9378d23-c15e-48e6-a0d1-b0b025ef2c41","id":"QR_a9378d23-c15e-48e6-a0d1-b0b025ef2c41","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:36:13][353684123094926][6518 ms][DEBUG] proc_open done in 5670 ms; code=255; res.len=3152 [2025-08-22 13:36:13][353684123094926][6518 ms][DEBUG] END runCmdUntilRes#1 in 5670 ms [2025-08-22 13:36:13][353684123094926][6518 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:36:28][355450532117841][0 ms][INFO] === Request start === [2025-08-22 13:36:28][355450532117841][1 ms][DEBUG] START check_scloud [2025-08-22 13:36:28][355450532117841][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:36:28][355450532117841][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 18840 4967 23637652 138828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:36:28][355450532117841][293 ms][DEBUG] targetPkg: running [2025-08-22 13:36:28][355450532117841][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 13:36:28][355450532117841][294 ms][DEBUG] START check_boot_completed [2025-08-22 13:36:28][355450532117841][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:36:28][355450532117841][340 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:36:28][355450532117841][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:36:29][355450532117841][403 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:36:29][355450532117841][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:36:29][355450532117841][403 ms][DEBUG] START check_internet [2025-08-22 13:36:29][355450532117841][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:36:29][355450532117841][793 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=273 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 273.883/273.883/273.883/0.000 ms\n [2025-08-22 13:36:29][355450532117841][793 ms][DEBUG] check_internet: online [2025-08-22 13:36:29][355450532117841][793 ms][DEBUG] END check_internet in 391 ms [2025-08-22 13:36:29][355450532117841][793 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:36:29][355450532117841][794 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355450532117841\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWC0CDCHJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4693\"}'\'' -e'"" [2025-08-22 13:36:29][355450532117841][794 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:36:29][355450532117841][794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355450532117841\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWC0CDCHJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4693\"}'\'' -e'"" [2025-08-22 13:36:33][355450532117841][5105 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_205f8c58-55ff-4e7d-bf3a-1237dbdc8433","id":"QR_205f8c58-55ff-4e7d-bf3a-1237dbdc8433","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:36:33][355450532117841][5261 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3152 [2025-08-22 13:36:33][355450532117841][5261 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-22 13:36:33][355450532117841][5261 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:37:07][352060481815643][1 ms][INFO] === Request start === [2025-08-22 13:37:07][352060481815643][2 ms][DEBUG] START check_scloud [2025-08-22 13:37:07][352060481815643][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:37:07][352060481815643][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 18840 4967 23763796 150912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:37:07][352060481815643][311 ms][DEBUG] targetPkg: running [2025-08-22 13:37:07][352060481815643][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 13:37:07][352060481815643][312 ms][DEBUG] START check_boot_completed [2025-08-22 13:37:07][352060481815643][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:37:07][352060481815643][358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:37:07][352060481815643][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:37:07][352060481815643][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:37:07][352060481815643][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:37:07][352060481815643][421 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:37:07][352060481815643][421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060481815643\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X306J66D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6423\"}'\'' -e'"" [2025-08-22 13:37:07][352060481815643][421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:37:07][352060481815643][421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060481815643\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X306J66D\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6423\"}'\'' -e'"" [2025-08-22 13:37:11][352060481815643][4623 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_355f2e42-6692-4d9e-b7f2-5693856aead9","id":"QR_355f2e42-6692-4d9e-b7f2-5693856aead9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:37:11][352060481815643][4779 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3152 [2025-08-22 13:37:11][352060481815643][4779 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-22 13:37:11][352060481815643][4779 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:39:07][350543333895949][0 ms][INFO] === Request start === [2025-08-22 13:39:07][350543333895949][1 ms][DEBUG] START check_scloud [2025-08-22 13:39:07][350543333895949][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:39:07][350543333895949][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 18840 4967 23901164 162256 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:39:07][350543333895949][301 ms][DEBUG] targetPkg: running [2025-08-22 13:39:07][350543333895949][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 13:39:07][350543333895949][301 ms][DEBUG] START check_boot_completed [2025-08-22 13:39:07][350543333895949][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:39:08][350543333895949][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:39:08][350543333895949][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:39:08][350543333895949][394 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:39:08][350543333895949][394 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:39:08][350543333895949][394 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:39:08][350543333895949][394 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543333895949\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58RA0SHF7J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ACR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8832\"}'\'' -e'"" [2025-08-22 13:39:08][350543333895949][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:39:08][350543333895949][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543333895949\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58RA0SHF7J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ACR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8832\"}'\'' -e'"" [2025-08-22 13:39:12][350543333895949][4971 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83121c44-87e0-40f9-87db-dc9140ce4243","id":"QR_83121c44-87e0-40f9-87db-dc9140ce4243","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:39:12][350543333895949][5127 ms][DEBUG] proc_open done in 4733 ms; code=255; res.len=3152 [2025-08-22 13:39:12][350543333895949][5127 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-08-22 13:39:12][350543333895949][5127 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:40:16][350287315541440][1 ms][INFO] === Request start === [2025-08-22 13:40:16][350287315541440][2 ms][DEBUG] START check_scloud [2025-08-22 13:40:16][350287315541440][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:40:16][350287315541440][261 ms][DEBUG] SU: done in 259 ms; outu0_a118 18840 4967 24014864 174300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:40:16][350287315541440][261 ms][DEBUG] targetPkg: running [2025-08-22 13:40:16][350287315541440][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-22 13:40:16][350287315541440][261 ms][DEBUG] START check_boot_completed [2025-08-22 13:40:16][350287315541440][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:40:16][350287315541440][306 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 13:40:16][350287315541440][306 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:40:16][350287315541440][400 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 13:40:16][350287315541440][400 ms][DEBUG] END check_boot_completed in 139 ms [2025-08-22 13:40:16][350287315541440][400 ms][DEBUG] START check_internet [2025-08-22 13:40:16][350287315541440][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:40:17][350287315541440][791 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.387/252.387/252.387/0.000 ms\n [2025-08-22 13:40:17][350287315541440][791 ms][DEBUG] check_internet: online [2025-08-22 13:40:17][350287315541440][791 ms][DEBUG] END check_internet in 391 ms [2025-08-22 13:40:17][350287315541440][791 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:40:17][350287315541440][791 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5825\"}'\'' -e'"" [2025-08-22 13:40:17][350287315541440][791 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:40:17][350287315541440][791 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287315541440\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0T06KR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5825\"}'\'' -e'"" [2025-08-22 13:40:21][350287315541440][5102 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e117c62b-0008-4699-a65c-3be66aac0f09","id":"QR_e117c62b-0008-4699-a65c-3be66aac0f09","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:40:21][350287315541440][5258 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3152 [2025-08-22 13:40:21][350287315541440][5258 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-22 13:40:21][350287315541440][5258 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:41:06][353520952484038][0 ms][INFO] === Request start === [2025-08-22 13:41:06][353520952484038][1 ms][DEBUG] START check_scloud [2025-08-22 13:41:06][353520952484038][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:41:07][353520952484038][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 18840 4967 24152336 185032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:41:07][353520952484038][318 ms][DEBUG] targetPkg: running [2025-08-22 13:41:07][353520952484038][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 13:41:07][353520952484038][318 ms][DEBUG] START check_boot_completed [2025-08-22 13:41:07][353520952484038][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:41:07][353520952484038][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:41:07][353520952484038][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:41:07][353520952484038][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:41:07][353520952484038][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:41:07][353520952484038][411 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:41:07][353520952484038][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520952484038\",\"model\":\"SM-A166B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0YDJSZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3690\"}'\'' -e'"" [2025-08-22 13:41:07][353520952484038][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:41:07][353520952484038][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520952484038\",\"model\":\"SM-A166B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXC0YDJSZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3690\"}'\'' -e'"" [2025-08-22 13:41:11][353520952484038][4379 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_733cd8ce-9668-4896-ae10-3e8e5b223de3","id":"QR_733cd8ce-9668-4896-ae10-3e8e5b223de3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:41:11][353520952484038][4535 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3152 [2025-08-22 13:41:11][353520952484038][4535 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-22 13:41:11][353520952484038][4535 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:41:18][353600811436385][0 ms][INFO] === Request start === [2025-08-22 13:41:18][353600811436385][1 ms][DEBUG] START check_scloud [2025-08-22 13:41:18][353600811436385][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:41:18][353600811436385][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 18840 4967 24325528 196800 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:41:18][353600811436385][306 ms][DEBUG] targetPkg: running [2025-08-22 13:41:18][353600811436385][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 13:41:18][353600811436385][306 ms][DEBUG] START check_boot_completed [2025-08-22 13:41:18][353600811436385][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:41:18][353600811436385][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:41:18][353600811436385][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:41:18][353600811436385][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:41:18][353600811436385][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:41:18][353600811436385][400 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:41:18][353600811436385][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811436385\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8T508077Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9409\"}'\'' -e'"" [2025-08-22 13:41:18][353600811436385][401 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:41:18][353600811436385][401 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600811436385\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8T508077Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9409\"}'\'' -e'"" [2025-08-22 13:41:23][353600811436385][5695 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f0e3a9ea-6457-4bf8-8e48-d82c4aed8b82","id":"QR_f0e3a9ea-6457-4bf8-8e48-d82c4aed8b82","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:41:23][353600811436385][5852 ms][DEBUG] proc_open done in 5451 ms; code=255; res.len=3152 [2025-08-22 13:41:23][353600811436385][5852 ms][DEBUG] END runCmdUntilRes#1 in 5451 ms [2025-08-22 13:41:23][353600811436385][5852 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:41:30][354916447317081][0 ms][INFO] === Request start === [2025-08-22 13:41:30][354916447317081][1 ms][DEBUG] START check_scloud [2025-08-22 13:41:30][354916447317081][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:41:30][354916447317081][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 18840 4967 24461820 207992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:41:30][354916447317081][303 ms][DEBUG] targetPkg: running [2025-08-22 13:41:30][354916447317081][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 13:41:30][354916447317081][303 ms][DEBUG] START check_boot_completed [2025-08-22 13:41:30][354916447317081][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:41:30][354916447317081][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:41:30][354916447317081][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:41:30][354916447317081][412 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 13:41:30][354916447317081][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:41:30][354916447317081][413 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:41:30][354916447317081][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916447317081\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W604TDQX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5280\"}'\'' -e'"" [2025-08-22 13:41:30][354916447317081][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:41:30][354916447317081][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916447317081\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W604TDQX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC5280\"}'\'' -e'"" [2025-08-22 13:41:34][354916447317081][4474 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f868017-8663-4939-8620-0282486c55be","id":"QR_2f868017-8663-4939-8620-0282486c55be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:41:34][354916447317081][4630 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3152 [2025-08-22 13:41:34][354916447317081][4630 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-22 13:41:34][354916447317081][4630 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:42:36][356921441858344][1 ms][INFO] === Request start === [2025-08-22 13:42:36][356921441858344][2 ms][DEBUG] START check_scloud [2025-08-22 13:42:36][356921441858344][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:42:36][356921441858344][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 18840 4967 24572476 219124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:42:36][356921441858344][266 ms][DEBUG] targetPkg: running [2025-08-22 13:42:36][356921441858344][266 ms][DEBUG] END check_scloud in 264 ms [2025-08-22 13:42:36][356921441858344][266 ms][DEBUG] START check_boot_completed [2025-08-22 13:42:36][356921441858344][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:42:36][356921441858344][313 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:42:36][356921441858344][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:42:36][356921441858344][359 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:42:36][356921441858344][359 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:42:36][356921441858344][359 ms][DEBUG] START check_internet [2025-08-22 13:42:36][356921441858344][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:42:36][356921441858344][828 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.488/200.488/200.488/0.000 ms\n [2025-08-22 13:42:36][356921441858344][828 ms][DEBUG] check_internet: online [2025-08-22 13:42:36][356921441858344][828 ms][DEBUG] END check_internet in 469 ms [2025-08-22 13:42:36][356921441858344][829 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:42:36][356921441858344][829 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921441858344\",\"model\":\"SM-M146B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX501N2HR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3984\"}'\'' -e'"" [2025-08-22 13:42:36][356921441858344][829 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:42:36][356921441858344][829 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356921441858344\",\"model\":\"SM-M146B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX501N2HR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3984\"}'\'' -e'"" [2025-08-22 13:42:41][356921441858344][5155 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cb158266-8d91-4322-bc08-7041c10f1247","id":"QR_cb158266-8d91-4322-bc08-7041c10f1247","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:42:41][356921441858344][5311 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3152 [2025-08-22 13:42:41][356921441858344][5311 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-22 13:42:41][356921441858344][5311 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:43:46][354126950983143][1 ms][INFO] === Request start === [2025-08-22 13:43:46][354126950983143][2 ms][DEBUG] START check_scloud [2025-08-22 13:43:46][354126950983143][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:43:46][354126950983143][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 18840 4967 24727140 230804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:43:46][354126950983143][313 ms][DEBUG] targetPkg: running [2025-08-22 13:43:46][354126950983143][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 13:43:46][354126950983143][314 ms][DEBUG] START check_boot_completed [2025-08-22 13:43:46][354126950983143][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:43:46][354126950983143][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:43:46][354126950983143][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:43:46][354126950983143][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:43:46][354126950983143][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:43:46][354126950983143][407 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:43:46][354126950983143][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354126950983143\",\"model\":\"SM-S928U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXA16BQDK\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8366\"}'\'' -e'"" [2025-08-22 13:43:46][354126950983143][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:43:46][354126950983143][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354126950983143\",\"model\":\"SM-S928U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXA16BQDK\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8366\"}'\'' -e'"" [2025-08-22 13:43:51][354126950983143][5859 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9e6bb0c5-ae91-4282-9cf1-4a040bdccea2","id":"QR_9e6bb0c5-ae91-4282-9cf1-4a040bdccea2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:43:52][354126950983143][6015 ms][DEBUG] proc_open done in 5607 ms; code=255; res.len=3152 [2025-08-22 13:43:52][354126950983143][6015 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-22 13:43:52][354126950983143][6015 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:44:04][350543336678649][0 ms][INFO] === Request start === [2025-08-22 13:44:04][350543336678649][1 ms][DEBUG] START check_scloud [2025-08-22 13:44:04][350543336678649][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:44:04][350543336678649][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 18840 4967 24906476 233024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:44:04][350543336678649][318 ms][DEBUG] targetPkg: running [2025-08-22 13:44:04][350543336678649][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 13:44:04][350543336678649][318 ms][DEBUG] START check_boot_completed [2025-08-22 13:44:04][350543336678649][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:44:04][350543336678649][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:44:04][350543336678649][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:44:04][350543336678649][427 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:44:04][350543336678649][427 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:44:04][350543336678649][427 ms][DEBUG] START check_internet [2025-08-22 13:44:04][350543336678649][427 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:44:04][350543336678649][755 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=181 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 181.871/181.871/181.871/0.000 ms\n [2025-08-22 13:44:04][350543336678649][755 ms][DEBUG] check_internet: online [2025-08-22 13:44:04][350543336678649][755 ms][DEBUG] END check_internet in 328 ms [2025-08-22 13:44:04][350543336678649][755 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:44:04][350543336678649][755 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543336678649\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58RC24DEEP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7608\"}'\'' -e'"" [2025-08-22 13:44:04][350543336678649][755 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:44:04][350543336678649][755 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543336678649\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58RC24DEEP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7608\"}'\'' -e'"" [2025-08-22 13:44:12][350543336678649][8785 ms][DEBUG] proc_open done in 8030 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 13:44:12][350543336678649][8785 ms][DEBUG] END runCmdUntilRes#1 in 8030 ms [2025-08-22 13:44:12][350543336678649][8785 ms][WARN] Detected error: Process with pid 18840 either refused to load frida-agent, or terminated during injection [2025-08-22 13:44:12][350543336678649][8785 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:44:12][350543336678649][8956 ms][DEBUG] SU: done in 171 ms; out [2025-08-22 13:44:12][350543336678649][8957 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:44:12][350543336678649][8957 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:44:13][350543336678649][9097 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 13:44:13][350543336678649][9097 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:44:13][350543336678649][9456 ms][DEBUG] SU: done in 359 ms; out [2025-08-22 13:44:15][350543336678649][11471 ms][DEBUG] START check_boot_completed [2025-08-22 13:44:15][350543336678649][11471 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:44:15][350543336678649][11518 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:44:15][350543336678649][11518 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:44:15][350543336678649][11612 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 13:44:15][350543336678649][11612 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-22 13:44:18][350543336678649][14626 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:44:18][350543336678649][14627 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543336678649\",\"model\":\"SM-A127F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58RC24DEEP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7608\"}'\'' -e'"" [2025-08-22 13:44:20][350543336678649][16173 ms][DEBUG] proc_open done in 1547 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-22 13:44:20][350543336678649][16173 ms][DEBUG] END runCmdUntilRes#2 in 1547 ms [2025-08-22 13:44:20][350543336678649][16173 ms][WARN] Detected error 2; Reboot the device [2025-08-22 13:44:20][350543336678649][16173 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 13:44:20][350543336678649][16813 ms][DEBUG] SU: done in 640 ms; out [2025-08-22 13:44:32][350543336678649][0 ms][INFO] === Request start === [2025-08-22 13:44:32][350543336678649][1 ms][DEBUG] START check_scloud [2025-08-22 13:44:32][350543336678649][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:44:32][350543336678649][38 ms][DEBUG] SU: done in 36 ms; out [2025-08-22 13:44:32][350543336678649][38 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:44:32][350543336678649][38 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:44:32][350543336678649][69 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:44:32][350543336678649][69 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:44:32][350543336678649][100 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:44:34][350543336678649][2115 ms][DEBUG] END check_scloud in 2114 ms [2025-08-22 13:44:34][350543336678649][2115 ms][DEBUG] START check_boot_completed [2025-08-22 13:44:34][350543336678649][2115 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:44:44][353026647705548][1 ms][INFO] === Request start === [2025-08-22 13:44:44][353026647705548][1 ms][DEBUG] START check_scloud [2025-08-22 13:44:44][353026647705548][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:44:44][353026647705548][29 ms][DEBUG] SU: done in 27 ms; out [2025-08-22 13:44:44][353026647705548][29 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:44:44][353026647705548][29 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:44:44][353026647705548][60 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:44:44][353026647705548][60 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:44:45][353026647705548][107 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:44:47][353026647705548][2122 ms][DEBUG] END check_scloud in 2121 ms [2025-08-22 13:44:47][353026647705548][2122 ms][DEBUG] START check_boot_completed [2025-08-22 13:44:47][353026647705548][2122 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:44:52][352971681180598][1 ms][INFO] === Request start === [2025-08-22 13:45:08][352971681180598][0 ms][INFO] === Request start === [2025-08-22 13:45:12][357358143867639][1 ms][INFO] === Request start === [2025-08-22 13:45:20][353026647705548][35662 ms][DEBUG] ADB: done in 33539 ms; out [2025-08-22 13:45:20][353026647705548][35662 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:45:20][353026647705548][35740 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:45:20][353026647705548][35740 ms][DEBUG] END check_boot_completed in 33617 ms [2025-08-22 13:45:20][353026647705548][35740 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:45:20][353026647705548][35740 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026647705548\",\"model\":\"SM-A166U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY42G0B1X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8030\"}'\'' -e'"" [2025-08-22 13:45:20][353026647705548][35740 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:45:20][353026647705548][35740 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353026647705548\",\"model\":\"SM-A166U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY42G0B1X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8030\"}'\'' -e'"" [2025-08-22 13:45:21][352971681180598][12183 ms][DEBUG] START check_scloud [2025-08-22 13:45:21][352971681180598][12183 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:45:21][352971681180598][12495 ms][DEBUG] SU: done in 312 ms; out [2025-08-22 13:45:21][352971681180598][12495 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:45:21][352971681180598][12495 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:45:21][352971681180598][12651 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 13:45:21][352971681180598][12651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:45:22][352971681180598][13151 ms][DEBUG] SU: done in 500 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:45:23][350543336678649][0 ms][INFO] === Request start === [2025-08-22 13:45:24][353026647705548][39192 ms][DEBUG] proc_open done in 3453 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 13:45:24][353026647705548][39193 ms][DEBUG] END runCmdUntilRes#1 in 3453 ms [2025-08-22 13:45:24][353026647705548][39193 ms][WARN] Detected error: Process not found [2025-08-22 13:45:24][353026647705548][39193 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:45:24][352971681180598][15166 ms][DEBUG] END check_scloud in 2984 ms [2025-08-22 13:45:24][352971681180598][15166 ms][DEBUG] START check_boot_completed [2025-08-22 13:45:24][352971681180598][15166 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:45:24][352971681180598][15197 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:45:24][352971681180598][15197 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:45:24][352971681180598][15244 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:45:24][352971681180598][15244 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:45:24][352971681180598][15244 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:45:24][352971681180598][15244 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971681180598\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58T41AQR3Z\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8710\"}'\'' -e'"" [2025-08-22 13:45:24][352971681180598][15244 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:45:24][352971681180598][15244 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971681180598\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58T41AQR3Z\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8710\"}'\'' -e'"" [2025-08-22 13:45:24][353026647705548][39333 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 13:45:24][353026647705548][39333 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:45:24][353026647705548][39333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:45:24][353026647705548][39474 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 13:45:24][353026647705548][39474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:45:24][353026647705548][39676 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:45:26][352971681180598][17384 ms][DEBUG] proc_open done in 2140 ms (timeout); code=0; out.len=0 err.len=19 [2025-08-22 13:45:26][352971681180598][17384 ms][DEBUG] END runCmdUntilRes#1 in 2140 ms [2025-08-22 13:45:26][352971681180598][17384 ms][WARN] Detected error: Process not found [2025-08-22 13:45:26][352971681180598][17384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:45:26][352971681180598][17416 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:45:26][352971681180598][17416 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:45:26][352971681180598][17416 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:45:26][352971681180598][17447 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:45:26][352971681180598][17447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:45:26][352971681180598][17478 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:45:26][357358143867639][14189 ms][DEBUG] START check_scloud [2025-08-22 13:45:26][357358143867639][14189 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:45:26][357358143867639][14236 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:45:26][357358143867639][14236 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:45:26][357358143867639][14236 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:45:26][357358143867639][14267 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:45:26][357358143867639][14267 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:45:26][357358143867639][14298 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:45:28][353026647705548][0 ms][INFO] === Request start === [2025-08-22 13:45:28][352971681180598][19491 ms][DEBUG] START check_boot_completed [2025-08-22 13:45:28][352971681180598][19491 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:45:28][352971681180598][19538 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:45:28][352971681180598][19538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:45:28][352971681180598][19600 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:45:28][352971681180598][19600 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:45:28][357358143867639][16311 ms][DEBUG] END check_scloud in 2122 ms [2025-08-22 13:45:28][357358143867639][16311 ms][DEBUG] START check_boot_completed [2025-08-22 13:45:28][357358143867639][16311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:45:28][357358143867639][16358 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:45:28][357358143867639][16358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:45:28][357358143867639][16420 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:45:28][357358143867639][16421 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 13:45:28][357358143867639][16421 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:45:28][357358143867639][16421 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358143867639\",\"model\":\"SM-X216B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TX9057CBN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3750\"}'\'' -e'"" [2025-08-22 13:45:28][357358143867639][16421 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:45:28][357358143867639][16421 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358143867639\",\"model\":\"SM-X216B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TX9057CBN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3750\"}'\'' -e'"" [2025-08-22 13:45:30][356223182673697][1 ms][INFO] === Request start === [2025-08-22 13:45:31][357358143867639][18764 ms][DEBUG] proc_open done in 2343 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 13:45:31][357358143867639][18764 ms][DEBUG] END runCmdUntilRes#1 in 2343 ms [2025-08-22 13:45:31][357358143867639][18764 ms][WARN] Detected error: Process not found [2025-08-22 13:45:31][357358143867639][18764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:45:31][357358143867639][18951 ms][DEBUG] SU: done in 187 ms; out [2025-08-22 13:45:31][357358143867639][18951 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:45:31][357358143867639][18951 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:45:31][352971681180598][22615 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:45:31][352971681180598][22615 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352971681180598\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58T41AQR3Z\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8710\"}'\'' -e'"" [2025-08-22 13:45:31][357358143867639][19154 ms][DEBUG] SU: done in 203 ms; out [2025-08-22 13:45:31][357358143867639][19154 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:45:32][357358143867639][19638 ms][DEBUG] SU: done in 484 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:45:34][357358143867639][21653 ms][DEBUG] START check_boot_completed [2025-08-22 13:45:34][357358143867639][21653 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:45:34][357358143867639][21700 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:45:34][357358143867639][21700 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:45:34][357358143867639][21810 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 13:45:34][357358143867639][21810 ms][DEBUG] END check_boot_completed in 157 ms [2025-08-22 13:45:37][357358143867639][24824 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:45:37][357358143867639][24825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357358143867639\",\"model\":\"SM-X216B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R9TX9057CBN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3750\"}'\'' -e'"" [2025-08-22 13:45:40][350543336678649][0 ms][INFO] === Request start === [2025-08-22 13:45:42][352971681180598][33503 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ca1c077f-11a0-4687-9134-7f1f52a6f6bf","id":"QR_ca1c077f-11a0-4687-9134-7f1f52a6f6bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:45:42][352971681180598][33660 ms][DEBUG] proc_open done in 11044 ms; code=255; res.len=3152 [2025-08-22 13:45:42][352971681180598][33660 ms][DEBUG] END runCmdUntilRes#2 in 11044 ms [2025-08-22 13:45:42][352971681180598][33660 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:45:42][350543336678649][2025 ms][DEBUG] START check_scloud [2025-08-22 13:45:42][350543336678649][2025 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:45:43][357358143867639][30807 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0ab7adce-839e-42f3-8fbc-fbe14d894e8d","id":"QR_0ab7adce-839e-42f3-8fbc-fbe14d894e8d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:45:43][357358143867639][30964 ms][DEBUG] proc_open done in 6139 ms; code=255; res.len=3152 [2025-08-22 13:45:43][357358143867639][30964 ms][DEBUG] END runCmdUntilRes#2 in 6139 ms [2025-08-22 13:45:43][357358143867639][30964 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:45:43][350543336678649][2619 ms][DEBUG] SU: done in 593 ms; outu0_a118 7955 4972 23663528 127056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:45:43][350543336678649][2619 ms][DEBUG] targetPkg: running [2025-08-22 13:45:43][350543336678649][2619 ms][DEBUG] END check_scloud in 594 ms [2025-08-22 13:45:43][350543336678649][2619 ms][DEBUG] START check_boot_completed [2025-08-22 13:45:43][350543336678649][2619 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:45:43][350543336678649][2650 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:45:43][350543336678649][2650 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:45:43][350543336678649][2712 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:45:43][350543336678649][2712 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:45:43][350543336678649][2712 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:45:43][350543336678649][2712 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543336678649\",\"model\":\"SM-A127F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58RC24DEEP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3894\"}'\'' -e'"" [2025-08-22 13:45:43][350543336678649][2712 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:45:43][350543336678649][2712 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350543336678649\",\"model\":\"SM-A127F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58RC24DEEP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3894\"}'\'' -e'"" [2025-08-22 13:45:43][356223182673697][13196 ms][DEBUG] START check_scloud [2025-08-22 13:45:43][356223182673697][13196 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:45:44][356223182673697][13914 ms][DEBUG] SU: done in 719 ms; out [2025-08-22 13:45:44][356223182673697][13915 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:45:44][356223182673697][13915 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:45:44][356223182673697][14149 ms][DEBUG] SU: done in 235 ms; out [2025-08-22 13:45:44][356223182673697][14150 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:45:45][350543336678649][4399 ms][DEBUG] proc_open done in 1687 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-22 13:45:45][350543336678649][4399 ms][DEBUG] END runCmdUntilRes#1 in 1687 ms [2025-08-22 13:45:45][350543336678649][4399 ms][WARN] Detected system_server; Reboot the device [2025-08-22 13:45:45][350543336678649][4399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 13:45:45][356223182673697][14570 ms][DEBUG] SU: done in 421 ms; out [2025-08-22 13:45:46][350543336678649][5274 ms][DEBUG] SU: done in 875 ms; out [2025-08-22 13:45:47][356223182673697][16586 ms][DEBUG] END check_scloud in 3390 ms [2025-08-22 13:45:47][356223182673697][16586 ms][DEBUG] START check_boot_completed [2025-08-22 13:45:47][356223182673697][16586 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:45:50][353026647705548][0 ms][INFO] === Request start === [2025-08-22 13:45:57][][1 ms][INFO] === Request start === [2025-08-22 13:46:07][353026647705548][0 ms][INFO] === Request start === [2025-08-22 13:46:07][353026647705548][1 ms][DEBUG] START check_scloud [2025-08-22 13:46:07][353026647705548][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:46:07][353026647705548][29 ms][DEBUG] SU: done in 28 ms; out [2025-08-22 13:46:07][353026647705548][29 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:46:07][353026647705548][29 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:46:07][353026647705548][60 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:46:07][353026647705548][60 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:46:07][353026647705548][91 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:46:07][352879321733066][0 ms][INFO] === Request start === [2025-08-22 13:46:09][353026647705548][2106 ms][DEBUG] END check_scloud in 2105 ms [2025-08-22 13:46:09][353026647705548][2106 ms][DEBUG] START check_boot_completed [2025-08-22 13:46:09][353026647705548][2107 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:46:14][][0 ms][INFO] === Request start === [2025-08-22 13:46:22][356223182673697][0 ms][INFO] === Request start === [2025-08-22 13:46:24][352879321733066][0 ms][INFO] === Request start === [2025-08-22 13:46:34][][0 ms][INFO] === Request start === [2025-08-22 13:46:44][356223182673697][0 ms][INFO] === Request start === [2025-08-22 13:46:44][][0 ms][INFO] === Request start === [2025-08-22 13:46:45][353026647705548][38683 ms][DEBUG] ADB: done in 36576 ms; out [2025-08-22 13:46:45][353026647705548][38683 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:46:45][353026647705548][38745 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:46:45][353026647705548][38745 ms][DEBUG] END check_boot_completed in 36639 ms [2025-08-22 13:46:45][353026647705548][38745 ms][DEBUG] START check_internet [2025-08-22 13:46:45][353026647705548][38745 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:46:45][353026647705548][38870 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 13:46:45][353026647705548][38870 ms][WARN] check_internet: offline [2025-08-22 13:46:45][353026647705548][38870 ms][DEBUG] END check_internet in 125 ms [2025-08-22 13:46:46][][2018 ms][DEBUG] START check_scloud [2025-08-22 13:46:46][][2018 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:46:46][][2330 ms][DEBUG] SU: done in 312 ms; out [2025-08-22 13:46:46][][2330 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:46:46][][2330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:46:46][][2533 ms][DEBUG] SU: done in 203 ms; out [2025-08-22 13:46:46][][2533 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:46:47][][2752 ms][DEBUG] SU: done in 219 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:46:47][][0 ms][INFO] === Request start === [2025-08-22 13:46:49][][4767 ms][DEBUG] END check_scloud in 2749 ms [2025-08-22 13:46:49][][4767 ms][DEBUG] START check_boot_completed [2025-08-22 13:46:49][][4767 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:46:51][][6829 ms][DEBUG] ADB: done in 2062 ms; out [2025-08-22 13:46:51][][6829 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:46:51][][6891 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:46:51][][6891 ms][DEBUG] END check_boot_completed in 2124 ms [2025-08-22 13:46:51][][6891 ms][DEBUG] START check_internet [2025-08-22 13:46:51][][6891 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:46:51][][7001 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 13:46:51][][7001 ms][WARN] check_internet: offline [2025-08-22 13:46:51][][7001 ms][DEBUG] END check_internet in 110 ms [2025-08-22 13:46:51][][4061 ms][DEBUG] START check_scloud [2025-08-22 13:46:51][][4061 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:46:51][][0 ms][INFO] === Request start === [2025-08-22 13:46:51][][0 ms][DEBUG] START check_scloud [2025-08-22 13:46:51][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:46:52][][4389 ms][DEBUG] SU: done in 328 ms; out [2025-08-22 13:46:52][][4389 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:46:52][][4389 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:46:52][][288 ms][DEBUG] SU: done in 288 ms; out [2025-08-22 13:46:52][][288 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:46:52][][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:46:52][][4545 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 13:46:52][][4545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:46:52][][554 ms][DEBUG] SU: done in 265 ms; out [2025-08-22 13:46:52][][554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:46:52][][4873 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:46:52][][882 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:46:53][][0 ms][INFO] === Request start === [2025-08-22 13:46:54][][6888 ms][DEBUG] END check_scloud in 2827 ms [2025-08-22 13:46:54][][6889 ms][DEBUG] START check_boot_completed [2025-08-22 13:46:54][][6889 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:46:54][][6935 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:46:54][][6936 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:46:54][][7029 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 13:46:54][][7029 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-22 13:46:54][][7029 ms][DEBUG] START check_internet [2025-08-22 13:46:54][][7029 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:46:54][][2897 ms][DEBUG] END check_scloud in 2897 ms [2025-08-22 13:46:54][][2897 ms][DEBUG] START check_boot_completed [2025-08-22 13:46:54][][2897 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:46:54][][2959 ms][DEBUG] ADB: done in 62 ms; out [2025-08-22 13:46:54][][2959 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:46:54][][3038 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:46:54][][3038 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 13:46:54][][3038 ms][DEBUG] START check_internet [2025-08-22 13:46:54][][3038 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:46:55][][7547 ms][DEBUG] SU: done in 517 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=124 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 124.651/124.651/124.651/0.000 ms\n [2025-08-22 13:46:55][][7547 ms][DEBUG] check_internet: online [2025-08-22 13:46:55][][7547 ms][DEBUG] END check_internet in 517 ms [2025-08-22 13:46:55][][7547 ms][DEBUG] rawBody.length=1130 [2025-08-22 13:46:55][][7547 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A166U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY42G0B1X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2933\"}'\'' -e'"" [2025-08-22 13:46:55][][7547 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:46:55][][7547 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A166U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY42G0B1X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2933\"}'\'' -e'"" [2025-08-22 13:46:55][][3444 ms][DEBUG] SU: done in 406 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=135 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 135.443/135.443/135.443/0.000 ms\n [2025-08-22 13:46:55][][3444 ms][DEBUG] check_internet: online [2025-08-22 13:46:55][][3444 ms][DEBUG] END check_internet in 406 ms [2025-08-22 13:46:55][][3444 ms][DEBUG] rawBody.length=1130 [2025-08-22 13:46:55][][3444 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58RC24DEEP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8923\"}'\'' -e'"" [2025-08-22 13:46:55][][3444 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:46:55][][3444 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A127F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58RC24DEEP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8923\"}'\'' -e'"" [2025-08-22 13:46:58][][6990 ms][DEBUG] proc_open done in 3546 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-22 13:46:58][][6990 ms][DEBUG] END runCmdUntilRes#1 in 3546 ms [2025-08-22 13:46:58][][6990 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5395 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5395 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-22 13:46:59][][6083 ms][DEBUG] START check_scloud [2025-08-22 13:46:59][][6083 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:46:59][][6583 ms][DEBUG] SU: done in 500 ms; out [2025-08-22 13:46:59][][6583 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:46:59][][6583 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:46:59][][6802 ms][DEBUG] SU: done in 219 ms; out [2025-08-22 13:46:59][][6802 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:47:00][][7177 ms][DEBUG] SU: done in 375 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:47:01][356223182673697][0 ms][INFO] === Request start === [2025-08-22 13:47:01][][13903 ms][DEBUG] proc_open done in 6355 ms (timeout); code=4; out.len=0 err.len=137 [2025-08-22 13:47:01][][13903 ms][DEBUG] END runCmdUntilRes#1 in 6356 ms [2025-08-22 13:47:01][][13903 ms][WARN] Detected error: Unable to load SELinux policy from the kernel: Failed to open file ?/sys/fs/selinux/policy?: Device or resource busyProcess not found [2025-08-22 13:47:01][][13903 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:47:01][][14029 ms][DEBUG] SU: done in 127 ms; out [2025-08-22 13:47:01][][14030 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:47:01][][14030 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:47:01][][14231 ms][DEBUG] SU: done in 201 ms; out [2025-08-22 13:47:01][][14231 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:47:02][][14418 ms][DEBUG] SU: done in 187 ms; out [2025-08-22 13:47:02][][9192 ms][DEBUG] END check_scloud in 3109 ms [2025-08-22 13:47:02][][9192 ms][DEBUG] START check_boot_completed [2025-08-22 13:47:02][][9192 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:47:02][][9239 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:47:02][][9239 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:47:02][][9334 ms][DEBUG] SU: done in 95 ms; out [2025-08-22 13:47:02][][9334 ms][DEBUG] END check_boot_completed in 142 ms [2025-08-22 13:47:02][][9334 ms][DEBUG] rawBody.length=1131 [2025-08-22 13:47:02][][9334 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8147\"}'\'' -e'"" [2025-08-22 13:47:02][][9334 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:47:02][][9334 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8147\"}'\'' -e'"" [2025-08-22 13:47:03][][10520 ms][DEBUG] proc_open done in 1185 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-22 13:47:03][][10520 ms][DEBUG] END runCmdUntilRes#1 in 1186 ms [2025-08-22 13:47:03][][10520 ms][WARN] Detected system_server; Reboot the device [2025-08-22 13:47:03][][10520 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 13:47:04][][16433 ms][DEBUG] START check_boot_completed [2025-08-22 13:47:04][][16433 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:47:04][][16480 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:47:04][][16480 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:47:04][][16558 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:47:04][][16558 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 13:47:07][][19573 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:47:07][][19573 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A166U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY42G0B1X\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2933\"}'\'' -e'"" [2025-08-22 13:47:07][][14316 ms][DEBUG] SU: done in 3795 ms; out [2025-08-22 13:47:08][352221805727837][0 ms][INFO] === Request start === [2025-08-22 13:47:18][356223182673697][17254 ms][DEBUG] START check_scloud [2025-08-22 13:47:18][356223182673697][17254 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:47:18][356223182673697][17285 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:47:18][356223182673697][17285 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:47:18][356223182673697][17285 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:47:18][356223182673697][17316 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:47:18][356223182673697][17316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:47:18][356223182673697][17347 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:47:19][][0 ms][INFO] === Request start === [2025-08-22 13:47:19][][31579 ms][DEBUG] proc_open done in 12005 ms (timeout); code=0; out.len=0 err.len=11 [2025-08-22 13:47:19][][31579 ms][DEBUG] END runCmdUntilRes#2 in 12006 ms [2025-08-22 13:47:19][][31579 ms][ERROR] NO RESULT; code=124 out errtimeout 12s [2025-08-22 13:47:19][352221805727837][11155 ms][DEBUG] START check_scloud [2025-08-22 13:47:19][352221805727837][11155 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:47:19][352221805727837][11202 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:47:19][352221805727837][11202 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:47:19][352221805727837][11202 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:47:19][352221805727837][11233 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:47:19][352221805727837][11233 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:47:19][352221805727837][11264 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:47:20][356223182673697][19363 ms][DEBUG] END check_scloud in 2109 ms [2025-08-22 13:47:20][356223182673697][19363 ms][DEBUG] START check_boot_completed [2025-08-22 13:47:20][356223182673697][19363 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:47:20][][0 ms][INFO] === Request start === [2025-08-22 13:47:21][352221805727837][13279 ms][DEBUG] END check_scloud in 2124 ms [2025-08-22 13:47:21][352221805727837][13279 ms][DEBUG] START check_boot_completed [2025-08-22 13:47:21][352221805727837][13279 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:47:36][][0 ms][INFO] === Request start === [2025-08-22 13:47:57][352879321733066][1 ms][INFO] === Request start === [2025-08-22 13:47:59][352221805727837][1 ms][INFO] === Request start === [2025-08-22 13:48:04][352221805727837][5078 ms][DEBUG] START check_scloud [2025-08-22 13:48:04][352221805727837][5078 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:48:04][352879321733066][7095 ms][DEBUG] START check_scloud [2025-08-22 13:48:04][352879321733066][7095 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:48:05][352879321733066][7361 ms][DEBUG] SU: done in 266 ms; out [2025-08-22 13:48:05][352221805727837][5468 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:48:05][352879321733066][7361 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:48:05][352221805727837][5469 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:48:05][352879321733066][7361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:48:05][352221805727837][5624 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 13:48:05][352221805727837][5624 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:48:05][352879321733066][7829 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:48:07][352221805727837][7952 ms][DEBUG] END check_scloud in 2874 ms [2025-08-22 13:48:07][352879321733066][9844 ms][DEBUG] START check_boot_completed [2025-08-22 13:48:07][352879321733066][9845 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:48:07][352221805727837][7952 ms][DEBUG] START check_boot_completed [2025-08-22 13:48:07][352221805727837][7952 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:48:07][352879321733066][9891 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:48:07][352221805727837][7999 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:48:07][352879321733066][9891 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:48:07][352221805727837][8046 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:48:07][352221805727837][8046 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:48:07][352221805727837][8046 ms][DEBUG] START check_internet [2025-08-22 13:48:07][352221805727837][8046 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:48:07][352221805727837][8155 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 13:48:07][352879321733066][10047 ms][WARN] check_internet: offline [2025-08-22 13:48:07][352221805727837][8155 ms][WARN] check_internet: offline [2025-08-22 13:48:07][352879321733066][10048 ms][DEBUG] END check_internet in 109 ms [2025-08-22 13:48:07][352221805727837][8155 ms][DEBUG] END check_internet in 109 ms [2025-08-22 13:48:09][][0 ms][INFO] === Request start === [2025-08-22 13:48:09][][1 ms][DEBUG] START check_scloud [2025-08-22 13:48:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:48:09][352879321733066][0 ms][INFO] === Request start === [2025-08-22 13:48:09][352879321733066][1 ms][DEBUG] START check_scloud [2025-08-22 13:48:09][352879321733066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:48:09][352879321733066][28 ms][DEBUG] SU: done in 27 ms; out 48:09][][35 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:48:09][][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:48:09][352879321733066][28 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:48:09][352879321733066][28 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:48:09][352879321733066][59 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:48:09][][66 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:48:09][352879321733066][59 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:48:09][][97 ms][DEBUG] SU: done in 31 ms; out in 31 ms; out [2025-08-22 13:48:11][352879321733066][2106 ms][DEBUG] END check_scloud in 2105 ms [2025-08-22 13:48:11][][2113 ms][DEBUG] START check_boot_completed [2025-08-22 13:48:11][352879321733066][2106 ms][DEBUG] START check_boot_completed [2025-08-22 13:48:11][][2113 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:48:11][352879321733066][2106 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:48:11][352879321733066][2153 ms][DEBUG] ADB: done[2025-08-22 13:[2025-08-22 13:48:11][352879321733066][2153 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:48:11][352879321733066][2215 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:48:11][352879321733066][2215 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 13:48:11][352879321733066][2216 ms][DEBUG] START check_internet [2025-08-22 13:48:11][352879321733066][2216 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:48:11][][2223 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 13:48:11][][2223 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 13:48:11][][2223 ms][DEBUG] START check_internet [2025-08-22 13:48:11][][2223 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:48:11][352879321733066][2324 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 13:48:11][352879321733066][2324 ms][WARN] check_internet: offline [2025-08-22 13:48:11][352879321733066][2325 ms][DEBUG] END check_internet in 109 ms [2025-08-22 13:48:11][][2331 ms][DEBUG] SU: done in 108 ms; out [2025-08-22 13:48:11][][2331 ms][WARN] check_internet: offline [2025-08-22 13:48:11][][2331 ms][DEBUG] END check_internet in 109 ms [2025-08-22 13:48:13][][0 ms][INFO] === Request start === [2025-08-22 13:48:13][][1 ms][DEBUG] START check_scloud [2025-08-22 13:48:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:48:13][][0 ms][INFO] === Request start === [2025-08-22 13:48:13][][1 ms][DEBUG] START check_scloud [2025-08-22 13:48:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:48:14][][777 ms][DEBUG] SU: done in 776 ms; out [2025-08-22 13:48:14][][777 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:48:14][][777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:48:14][][895 ms][DEBUG] SU: done in 894 ms; out [2025-08-22 13:48:14][][895 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:48:14][][895 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:48:14][][1027 ms][DEBUG] SU: done in 250 ms; out [2025-08-22 13:48:14][][1027 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:48:14][][1255 ms][DEBUG] SU: done in 359 ms; out [2025-08-22 13:48:14][][1255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:48:14][][1402 ms][DEBUG] SU: done in 375 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:48:15][][2083 ms][DEBUG] SU: done in 828 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:48:16][][3417 ms][DEBUG] END check_scloud in 3416 ms [2025-08-22 13:48:16][][3417 ms][DEBUG] START check_boot_completed [2025-08-22 13:48:16][][3417 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:48:16][][3464 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:48:16][][3464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:48:16][][3526 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:48:16][][3526 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:48:16][][3526 ms][DEBUG] START check_internet [2025-08-22 13:48:16][][3526 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:48:17][][3995 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.853/174.853/174.853/0.000 ms\n [2025-08-22 13:48:17][][3995 ms][DEBUG] check_internet: online [2025-08-22 13:48:17][][3995 ms][DEBUG] END check_internet in 469 ms [2025-08-22 13:48:17][][3995 ms][DEBUG] rawBody.length=1131 [2025-08-22 13:48:17][][3995 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A336B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW11MYZFR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5507\"}'\'' -e'"" [2025-08-22 13:48:17][][3996 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:48:17][][3996 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A336B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW11MYZFR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5507\"}'\'' -e'"" [2025-08-22 13:48:17][][4098 ms][DEBUG] END check_scloud in 4097 ms [2025-08-22 13:48:17][][4098 ms][DEBUG] START check_boot_completed [2025-08-22 13:48:17][][4098 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:48:17][][4145 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:48:17][][4145 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:48:17][][4316 ms][DEBUG] SU: done in 171 ms; out [2025-08-22 13:48:17][][4316 ms][DEBUG] END check_boot_completed in 219 ms [2025-08-22 13:48:17][][4316 ms][DEBUG] START check_internet [2025-08-22 13:48:17][][4316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:48:18][][4848 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=233 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 233.792/233.792/233.792/0.000 ms\n [2025-08-22 13:48:18][][4848 ms][DEBUG] check_internet: online [2025-08-22 13:48:18][][4848 ms][DEBUG] END check_internet in 531 ms [2025-08-22 13:48:18][][4848 ms][DEBUG] rawBody.length=1130 [2025-08-22 13:48:18][][4848 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1124\"}'\'' -e'"" [2025-08-22 13:48:18][][4848 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:48:18][][4848 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1124\"}'\'' -e'"" [2025-08-22 13:48:22][][8971 ms][DEBUG] proc_open done in 4123 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-22 13:48:22][][8971 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-22 13:48:22][][8971 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5443 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5443 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-22 13:48:24][][0 ms][INFO] === Request start === [2025-08-22 13:48:27][][13711 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 13:48:27][][13868 ms][DEBUG] proc_open done in 9872 ms; code=255; res.len=107 [2025-08-22 13:48:27][][13868 ms][DEBUG] END runCmdUntilRes#1 in 9872 ms [2025-08-22 13:48:27][][13868 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 13:48:27][][3042 ms][DEBUG] START check_scloud [2025-08-22 13:48:27][][3042 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:48:27][][0 ms][INFO] === Request start === [2025-08-22 13:48:27][][1 ms][DEBUG] START check_scloud [2025-08-22 13:48:27][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:48:27][][3417 ms][DEBUG] SU: done in 375 ms; outu0_a118 8147 5019 23930840 116320 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:48:27][][3417 ms][DEBUG] targetPkg: running [2025-08-22 13:48:27][][3417 ms][DEBUG] END check_scloud in 375 ms [2025-08-22 13:48:27][][3417 ms][DEBUG] START check_boot_completed [2025-08-22 13:48:27][][3417 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:48:27][][3464 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:48:27][][3464 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:48:27][][3542 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:48:27][][3542 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 13:48:27][][3542 ms][DEBUG] START check_internet [2025-08-22 13:48:27][][3542 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:48:27][][436 ms][DEBUG] SU: done in 435 ms; outu0_a118 8147 5019 23930840 114992 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:48:27][][436 ms][DEBUG] targetPkg: running [2025-08-22 13:48:27][][436 ms][DEBUG] END check_scloud in 435 ms [2025-08-22 13:48:27][][436 ms][DEBUG] START check_boot_completed [2025-08-22 13:48:27][][436 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:48:28][][498 ms][DEBUG] ADB: done in 62 ms; out [2025-08-22 13:48:28][][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:48:28][][545 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:48:28][][545 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:48:28][][545 ms][DEBUG] START check_internet [2025-08-22 13:48:28][][545 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:48:28][][3793 ms][DEBUG] SU: done in 251 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=125 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 125.283/125.283/125.283/0.000 ms\n [2025-08-22 13:48:28][][3793 ms][DEBUG] check_internet: online [2025-08-22 13:48:28][][3793 ms][DEBUG] END check_internet in 251 ms [2025-08-22 13:48:28][][3793 ms][DEBUG] rawBody.length=1130 [2025-08-22 13:48:28][][3793 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1124\"}'\'' -e'"" [2025-08-22 13:48:28][][3794 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:48:28][][3794 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1124\"}'\'' -e'"" [2025-08-22 13:48:28][][827 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.526/141.526/141.526/0.000 ms\n [2025-08-22 13:48:28][][827 ms][DEBUG] check_internet: online [2025-08-22 13:48:28][][827 ms][DEBUG] END check_internet in 281 ms [2025-08-22 13:48:28][][827 ms][DEBUG] rawBody.length=1131 [2025-08-22 13:48:28][][827 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A336B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW11MYZFR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6816\"}'\'' -e'"" [2025-08-22 13:48:28][][827 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:48:28][][827 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A336B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW11MYZFR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6816\"}'\'' -e'"" [2025-08-22 13:48:33][][9134 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 13:48:33][][9290 ms][DEBUG] proc_open done in 5496 ms; code=255; res.len=107 [2025-08-22 13:48:33][][9291 ms][DEBUG] END runCmdUntilRes#1 in 5497 ms [2025-08-22 13:48:33][][9291 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 13:48:33][][0 ms][INFO] === Request start === [2025-08-22 13:48:50][][0 ms][INFO] === Request start === [2025-08-22 13:48:50][][1 ms][DEBUG] START check_scloud [2025-08-22 13:48:50][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:48:51][][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 8147 5019 24014772 73784 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:48:51][][274 ms][DEBUG] targetPkg: running [2025-08-22 13:48:51][][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-22 13:48:51][][274 ms][DEBUG] START check_boot_completed [2025-08-22 13:48:51][][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:48:51][][305 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:48:51][][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:48:51][][352 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:48:51][][352 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:48:51][][352 ms][DEBUG] START check_internet [2025-08-22 13:48:51][][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:48:51][][617 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.312/170.312/170.312/0.000 ms\n [2025-08-22 13:48:51][][617 ms][DEBUG] check_internet: online [2025-08-22 13:48:51][][617 ms][DEBUG] END check_internet in 266 ms [2025-08-22 13:48:51][][618 ms][DEBUG] rawBody.length=1130 [2025-08-22 13:48:51][][618 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-08-22 13:48:51][][618 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:48:51][][618 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A346E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2638\"}'\'' -e'"" [2025-08-22 13:48:52][][1742 ms][DEBUG] proc_open done in 1124 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-22 13:48:52][][1742 ms][DEBUG] END runCmdUntilRes#1 in 1125 ms [2025-08-22 13:48:52][][1742 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5443 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5443 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-22 13:49:10][][0 ms][INFO] === Request start === [2025-08-22 13:49:10][][1 ms][DEBUG] START check_scloud [2025-08-22 13:49:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:49:10][][42 ms][DEBUG] SU: done in 41 ms; out [2025-08-22 13:49:10][][42 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:49:10][][42 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:49:10][][73 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:49:10][][73 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:49:10][][104 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 13:49:12][][2120 ms][DEBUG] END check_scloud in 2119 ms [2025-08-22 13:49:12][][2120 ms][DEBUG] START check_boot_completed [2025-08-22 13:49:12][][2120 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:50:22][350518497632346][1 ms][INFO] === Request start === [2025-08-22 13:50:22][350518497632346][2 ms][DEBUG] START check_scloud [2025-08-22 13:50:22][350518497632346][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:50:22][350518497632346][639 ms][DEBUG] SU: done in 638 ms; out [2025-08-22 13:50:22][350518497632346][639 ms][WARN] targetPkg: not running, restarting [2025-08-22 13:50:22][350518497632346][639 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:50:23][350518497632346][811 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 13:50:23][350518497632346][811 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:50:23][350518497632346][1202 ms][DEBUG] SU: done in 390 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:50:25][350518497632346][3217 ms][DEBUG] END check_scloud in 3215 ms [2025-08-22 13:50:25][350518497632346][3217 ms][DEBUG] START check_boot_completed [2025-08-22 13:50:25][350518497632346][3217 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:50:25][350518497632346][3264 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:50:25][350518497632346][3264 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:50:25][350518497632346][3342 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:50:25][350518497632346][3342 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 13:50:25][350518497632346][3342 ms][DEBUG] START check_internet [2025-08-22 13:50:25][350518497632346][3342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:50:26][350518497632346][3795 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=205 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 205.508/205.508/205.508/0.000 ms\n [2025-08-22 13:50:26][350518497632346][3795 ms][DEBUG] check_internet: online [2025-08-22 13:50:26][350518497632346][3795 ms][DEBUG] END check_internet in 453 ms [2025-08-22 13:50:26][350518497632346][3795 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:50:26][350518497632346][3796 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518497632346\",\"model\":\"SM-S928B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX31XEJ3Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9150\"}'\'' -e'"" [2025-08-22 13:50:26][350518497632346][3796 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:50:26][350518497632346][3796 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518497632346\",\"model\":\"SM-S928B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX31XEJ3Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9150\"}'\'' -e'"" [2025-08-22 13:50:33][350518497632346][11434 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ed11712a-9aa6-43ee-939f-4c998b0a4ff7","id":"QR_ed11712a-9aa6-43ee-939f-4c998b0a4ff7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:50:33][350518497632346][11590 ms][DEBUG] proc_open done in 7794 ms; code=255; res.len=3152 [2025-08-22 13:50:33][350518497632346][11590 ms][DEBUG] END runCmdUntilRes#1 in 7794 ms [2025-08-22 13:50:33][350518497632346][11590 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:50:39][354255813154319][0 ms][INFO] === Request start === [2025-08-22 13:50:39][354255813154319][1 ms][DEBUG] START check_scloud [2025-08-22 13:50:39][354255813154319][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:50:39][354255813154319][364 ms][DEBUG] SU: done in 363 ms; outu0_a118 8844 4966 23749280 90892 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:50:39][354255813154319][364 ms][DEBUG] targetPkg: running [2025-08-22 13:50:39][354255813154319][364 ms][DEBUG] END check_scloud in 363 ms [2025-08-22 13:50:39][354255813154319][364 ms][DEBUG] START check_boot_completed [2025-08-22 13:50:39][354255813154319][365 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:50:39][354255813154319][411 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:50:39][354255813154319][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:50:39][354255813154319][473 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:50:39][354255813154319][473 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:50:39][354255813154319][473 ms][DEBUG] START check_internet [2025-08-22 13:50:39][354255813154319][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:50:40][354255813154319][864 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.428/134.428/134.428/0.000 ms\n [2025-08-22 13:50:40][354255813154319][864 ms][DEBUG] check_internet: online [2025-08-22 13:50:40][354255813154319][864 ms][DEBUG] END check_internet in 391 ms [2025-08-22 13:50:40][354255813154319][864 ms][DEBUG] rawBody.length=693 [2025-08-22 13:50:40][354255813154319][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813154319\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 13:50:40][354255813154319][864 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:50:40][354255813154319][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255813154319\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 13:50:44][354255813154319][5285 ms][DEBUG] frida res:res:{"id":"68a25342bfcb0b536c8783e9","href":"https://eu-kc.samsungknox.com/cc/v1/devices/enrollment/seg/devices/68a25342bfcb0b536c8783e9","management":{"agent":{"href":"https://umc-cdn.secb2b.com/kc/single/KCC.apk","appTitle":"Knox Configure","packageName":"com.sec.knox.kccagent","version":"1.4","signatures":["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"]},"payload":{"KCUri":"eu-kc.samsungknox.com","authType":"MUTUAL_SSL","feedbackUri":""}},"license":{"licenseStatus":"ACTIVE","activationStatus":null}}\r\n [2025-08-22 13:50:44][354255813154319][5441 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=2939 [2025-08-22 13:50:44][354255813154319][5441 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-22 13:50:44][354255813154319][5441 ms][INFO] SUCCESS response from frida (len=2939) [2025-08-22 13:51:07][350784342564981][0 ms][INFO] === Request start === [2025-08-22 13:51:07][350784342564981][1 ms][DEBUG] START check_scloud [2025-08-22 13:51:07][350784342564981][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:51:07][350784342564981][390 ms][DEBUG] SU: done in 389 ms; outu0_a118 8844 4966 23821400 60352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:51:07][350784342564981][390 ms][DEBUG] targetPkg: running [2025-08-22 13:51:07][350784342564981][390 ms][DEBUG] END check_scloud in 390 ms [2025-08-22 13:51:07][350784342564981][391 ms][DEBUG] START check_boot_completed [2025-08-22 13:51:07][350784342564981][391 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:51:07][350784342564981][437 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:51:07][350784342564981][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:51:07][350784342564981][500 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:51:07][350784342564981][500 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:51:07][350784342564981][500 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:51:07][350784342564981][500 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350784342564981\",\"model\":\"SM-A325M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8R706BF6N\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6919\"}'\'' -e'"" [2025-08-22 13:51:07][350784342564981][500 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:51:07][350784342564981][500 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350784342564981\",\"model\":\"SM-A325M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8R706BF6N\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6919\"}'\'' -e'"" [2025-08-22 13:51:10][356722913988852][1 ms][INFO] === Request start === [2025-08-22 13:51:13][350784342564981][6201 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ea88ba2-1f74-4948-ac5a-67673ec6ce50","id":"QR_8ea88ba2-1f74-4948-ac5a-67673ec6ce50","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:51:13][350784342564981][6357 ms][DEBUG] proc_open done in 5857 ms; code=255; res.len=3152 [2025-08-22 13:51:13][350784342564981][6358 ms][DEBUG] END runCmdUntilRes#1 in 5858 ms [2025-08-22 13:51:13][350784342564981][6358 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:51:14][356722913988852][4051 ms][DEBUG] START check_scloud [2025-08-22 13:51:14][356722913988852][4051 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:51:14][356722913988852][4379 ms][DEBUG] SU: done in 328 ms; outu0_a118 8844 4966 23957728 75296 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:51:14][356722913988852][4379 ms][DEBUG] targetPkg: running [2025-08-22 13:51:14][356722913988852][4379 ms][DEBUG] END check_scloud in 328 ms [2025-08-22 13:51:14][356722913988852][4379 ms][DEBUG] START check_boot_completed [2025-08-22 13:51:14][356722913988852][4379 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:51:14][356722913988852][4410 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:51:14][356722913988852][4410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:51:14][356722913988852][4459 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 13:51:14][356722913988852][4459 ms][DEBUG] END check_boot_completed in 80 ms [2025-08-22 13:51:14][356722913988852][4459 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:51:14][356722913988852][4459 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722913988852\",\"model\":\"SM-A156M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX306ZKTV\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9863\"}'\'' -e'"" [2025-08-22 13:51:14][356722913988852][4459 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:51:14][356722913988852][4459 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356722913988852\",\"model\":\"SM-A156M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX306ZKTV\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9863\"}'\'' -e'"" [2025-08-22 13:51:19][356722913988852][9549 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2647d0ef-8c21-4746-8e5f-e69b9a631025","id":"QR_2647d0ef-8c21-4746-8e5f-e69b9a631025","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:51:19][356722913988852][9705 ms][DEBUG] proc_open done in 5246 ms; code=255; res.len=3152 [2025-08-22 13:51:19][356722913988852][9705 ms][DEBUG] END runCmdUntilRes#1 in 5246 ms [2025-08-22 13:51:19][356722913988852][9705 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:52:05][353520955574843][0 ms][INFO] === Request start === [2025-08-22 13:52:05][353520955574843][1 ms][DEBUG] START check_scloud [2025-08-22 13:52:05][353520955574843][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:52:06][353520955574843][356 ms][DEBUG] SU: done in 355 ms; outu0_a118 8844 4966 24035412 70100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:52:06][353520955574843][356 ms][DEBUG] targetPkg: running [2025-08-22 13:52:06][353520955574843][356 ms][DEBUG] END check_scloud in 355 ms [2025-08-22 13:52:06][353520955574843][356 ms][DEBUG] START check_boot_completed [2025-08-22 13:52:06][353520955574843][356 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:52:06][353520955574843][403 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:52:06][353520955574843][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:52:06][353520955574843][465 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:52:06][353520955574843][465 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:52:06][353520955574843][465 ms][DEBUG] START check_internet [2025-08-22 13:52:06][353520955574843][465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:52:06][353520955574843][731 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=169 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 169.690/169.690/169.690/0.000 ms\n [2025-08-22 13:52:06][353520955574843][731 ms][DEBUG] check_internet: online [2025-08-22 13:52:06][353520955574843][731 ms][DEBUG] END check_internet in 266 ms [2025-08-22 13:52:06][353520955574843][732 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:52:06][353520955574843][732 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520955574843\",\"model\":\"SM-A166B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY11BE3EX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3827\"}'\'' -e'"" [2025-08-22 13:52:06][353520955574843][732 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:52:06][353520955574843][732 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353520955574843\",\"model\":\"SM-A166B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY11BE3EX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3827\"}'\'' -e'"" [2025-08-22 13:52:10][353520955574843][4980 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5609e260-7095-49fa-b9bc-b05722c9c7e2","id":"QR_5609e260-7095-49fa-b9bc-b05722c9c7e2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:52:10][353520955574843][5136 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3152 [2025-08-22 13:52:10][353520955574843][5136 ms][DEBUG] END runCmdUntilRes#1 in 4404 ms [2025-08-22 13:52:10][353520955574843][5136 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:52:21][354791640079725][0 ms][INFO] === Request start === [2025-08-22 13:52:21][354791640079725][1 ms][DEBUG] START check_scloud [2025-08-22 13:52:21][354791640079725][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:52:21][354791640079725][338 ms][DEBUG] SU: done in 337 ms; outu0_a118 8844 4966 24165660 85520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:52:21][354791640079725][338 ms][DEBUG] targetPkg: running [2025-08-22 13:52:21][354791640079725][338 ms][DEBUG] END check_scloud in 337 ms [2025-08-22 13:52:21][354791640079725][338 ms][DEBUG] START check_boot_completed [2025-08-22 13:52:21][354791640079725][338 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:52:21][354791640079725][385 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:52:21][354791640079725][385 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:52:21][354791640079725][463 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:52:21][354791640079725][463 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 13:52:21][354791640079725][463 ms][DEBUG] START check_internet [2025-08-22 13:52:21][354791640079725][463 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:52:21][354791640079725][760 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=171 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 171.120/171.120/171.120/0.000 ms\n [2025-08-22 13:52:21][354791640079725][760 ms][DEBUG] check_internet: online [2025-08-22 13:52:21][354791640079725][760 ms][DEBUG] END check_internet in 297 ms [2025-08-22 13:52:21][354791640079725][760 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:52:21][354791640079725][760 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791640079725\",\"model\":\"SM-G780F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N935N1NT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2166\"}'\'' -e'"" [2025-08-22 13:52:21][354791640079725][760 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:52:21][354791640079725][760 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354791640079725\",\"model\":\"SM-G780F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N935N1NT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2166\"}'\'' -e'"" [2025-08-22 13:52:25][354791640079725][4805 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41f6d6ef-c964-4b46-ae48-3a399bcda156","id":"QR_41f6d6ef-c964-4b46-ae48-3a399bcda156","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:52:26][354791640079725][4962 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3152 [2025-08-22 13:52:26][354791640079725][4962 ms][DEBUG] END runCmdUntilRes#1 in 4202 ms [2025-08-22 13:52:26][354791640079725][4962 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:53:04][351240642072869][0 ms][INFO] === Request start === [2025-08-22 13:53:04][351240642072869][1 ms][DEBUG] START check_scloud [2025-08-22 13:53:04][351240642072869][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:53:05][351240642072869][329 ms][DEBUG] SU: done in 328 ms; outu0_a118 8844 4966 24294868 102420 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:53:05][351240642072869][329 ms][DEBUG] targetPkg: running [2025-08-22 13:53:05][351240642072869][329 ms][DEBUG] END check_scloud in 328 ms [2025-08-22 13:53:05][351240642072869][329 ms][DEBUG] START check_boot_completed [2025-08-22 13:53:05][351240642072869][329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:53:05][351240642072869][361 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:53:05][351240642072869][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:53:05][351240642072869][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:53:05][351240642072869][408 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:53:05][351240642072869][408 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:53:05][351240642072869][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642072869\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W90DM90M\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5252\"}'\'' -e'"" [2025-08-22 13:53:05][351240642072869][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:53:05][351240642072869][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351240642072869\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W90DM90M\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5252\"}'\'' -e'"" [2025-08-22 13:53:09][357066601533789][1 ms][INFO] === Request start === [2025-08-22 13:53:09][351240642072869][4438 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f3154a50-7148-46f6-8633-4d98d8d7b7fb","id":"QR_f3154a50-7148-46f6-8633-4d98d8d7b7fb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:53:09][351240642072869][4594 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3152 [2025-08-22 13:53:09][351240642072869][4594 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-22 13:53:09][351240642072869][4594 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:53:10][357066601533789][1008 ms][DEBUG] START check_scloud [2025-08-22 13:53:10][357066601533789][1008 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:53:10][357066601533789][1336 ms][DEBUG] SU: done in 328 ms; outu0_a118 8844 4966 24472156 114016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:53:10][357066601533789][1336 ms][DEBUG] targetPkg: running [2025-08-22 13:53:10][357066601533789][1336 ms][DEBUG] END check_scloud in 328 ms [2025-08-22 13:53:10][357066601533789][1336 ms][DEBUG] START check_boot_completed [2025-08-22 13:53:10][357066601533789][1336 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:53:10][357066601533789][1382 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:53:10][357066601533789][1382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:53:10][357066601533789][1429 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:53:10][357066601533789][1429 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:53:10][357066601533789][1429 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:53:10][357066601533789][1429 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066601533789\",\"model\":\"SM-S721B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXB0KEZ3P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1712\"}'\'' -e'"" [2025-08-22 13:53:10][357066601533789][1429 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:53:10][357066601533789][1429 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357066601533789\",\"model\":\"SM-S721B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCXB0KEZ3P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1712\"}'\'' -e'"" [2025-08-22 13:53:15][357066601533789][5756 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35f12abe-3799-4187-8d1a-632464ca6688","id":"QR_35f12abe-3799-4187-8d1a-632464ca6688","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:53:15][357066601533789][5913 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3152 [2025-08-22 13:53:15][357066601533789][5913 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-22 13:53:15][357066601533789][5913 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:53:58][352404916207861][1 ms][INFO] === Request start === [2025-08-22 13:53:58][352404916207861][2 ms][DEBUG] START check_scloud [2025-08-22 13:53:58][352404916207861][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:53:59][352404916207861][317 ms][DEBUG] SU: done in 315 ms; outu0_a118 8844 4966 24610460 126708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:53:59][352404916207861][317 ms][DEBUG] targetPkg: running [2025-08-22 13:53:59][352404916207861][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 13:53:59][352404916207861][317 ms][DEBUG] START check_boot_completed [2025-08-22 13:53:59][352404916207861][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:53:59][352404916207861][364 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:53:59][352404916207861][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:53:59][352404916207861][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:53:59][352404916207861][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:53:59][352404916207861][411 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:53:59][352404916207861][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352404916207861\",\"model\":\"SM-S911B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW41A4GCL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9550\"}'\'' -e'"" [2025-08-22 13:53:59][352404916207861][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:53:59][352404916207861][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352404916207861\",\"model\":\"SM-S911B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW41A4GCL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9550\"}'\'' -e'"" [2025-08-22 13:54:03][352404916207861][4426 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1e17f8e1-ead3-457a-8a5a-26bb462b53d1","id":"QR_1e17f8e1-ead3-457a-8a5a-26bb462b53d1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:54:03][352404916207861][4582 ms][DEBUG] proc_open done in 4171 ms; code=255; res.len=3152 [2025-08-22 13:54:03][352404916207861][4582 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-22 13:54:03][352404916207861][4582 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:54:09][351798810891725][0 ms][INFO] === Request start === [2025-08-22 13:54:09][351798810891725][1 ms][DEBUG] START check_scloud [2025-08-22 13:54:09][351798810891725][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:54:09][351798810891725][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 8844 4966 24750884 136288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:54:09][351798810891725][299 ms][DEBUG] targetPkg: running [2025-08-22 13:54:09][351798810891725][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 13:54:09][351798810891725][299 ms][DEBUG] START check_boot_completed [2025-08-22 13:54:09][351798810891725][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:54:09][351798810891725][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:54:09][351798810891725][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:54:09][351798810891725][408 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:54:09][351798810891725][408 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:54:09][351798810891725][408 ms][DEBUG] START check_internet [2025-08-22 13:54:09][351798810891725][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:54:10][351798810891725][767 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=250 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 250.171/250.171/250.171/0.000 ms\n [2025-08-22 13:54:10][351798810891725][767 ms][DEBUG] check_internet: online [2025-08-22 13:54:10][351798810891725][767 ms][DEBUG] END check_internet in 359 ms [2025-08-22 13:54:10][351798810891725][767 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:54:10][351798810891725][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798810891725\",\"model\":\"SM-A225M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8T805YP2P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2243\"}'\'' -e'"" [2025-08-22 13:54:10][351798810891725][768 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:54:10][351798810891725][768 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351798810891725\",\"model\":\"SM-A225M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8T805YP2P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2243\"}'\'' -e'"" [2025-08-22 13:54:16][351798810891725][7266 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8fe1f1aa-1984-4c62-b5d7-6306bb0637ea","id":"QR_8fe1f1aa-1984-4c62-b5d7-6306bb0637ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:54:16][351798810891725][7422 ms][DEBUG] proc_open done in 6655 ms; code=255; res.len=3152 [2025-08-22 13:54:16][351798810891725][7422 ms][DEBUG] END runCmdUntilRes#1 in 6655 ms [2025-08-22 13:54:16][351798810891725][7422 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:54:26][355100980978505][0 ms][INFO] === Request start === [2025-08-22 13:54:26][355100980978505][1 ms][DEBUG] START check_scloud [2025-08-22 13:54:26][355100980978505][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:54:26][355100980978505][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 8844 4966 24884104 147484 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:54:26][355100980978505][308 ms][DEBUG] targetPkg: running [2025-08-22 13:54:26][355100980978505][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 13:54:26][355100980978505][308 ms][DEBUG] START check_boot_completed [2025-08-22 13:54:26][355100980978505][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:54:26][355100980978505][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:54:26][355100980978505][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:54:26][355100980978505][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:54:26][355100980978505][401 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:54:26][355100980978505][401 ms][DEBUG] START check_internet [2025-08-22 13:54:26][355100980978505][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:54:27][355100980978505][698 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.822/191.822/191.822/0.000 ms\n [2025-08-22 13:54:27][355100980978505][698 ms][DEBUG] check_internet: online [2025-08-22 13:54:27][355100980978505][698 ms][DEBUG] END check_internet in 297 ms [2025-08-22 13:54:27][355100980978505][698 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:54:27][355100980978505][698 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355100980978505\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCW80DQXVR\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6837\"}'\'' -e'"" [2025-08-22 13:54:27][355100980978505][698 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:54:27][355100980978505][698 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355100980978505\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCW80DQXVR\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6837\"}'\'' -e'"" [2025-08-22 13:54:32][355100980978505][5697 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b4158935-384c-4c7b-97cb-d340bd1683cb","id":"QR_b4158935-384c-4c7b-97cb-d340bd1683cb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:54:32][355100980978505][5853 ms][DEBUG] proc_open done in 5155 ms; code=255; res.len=3152 [2025-08-22 13:54:32][355100980978505][5853 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-08-22 13:54:32][355100980978505][5853 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:54:53][350256190361158][0 ms][INFO] === Request start === [2025-08-22 13:54:53][350256190361158][1 ms][DEBUG] START check_scloud [2025-08-22 13:54:53][350256190361158][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:54:53][350256190361158][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 8844 4966 24989704 159448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:54:53][350256190361158][262 ms][DEBUG] targetPkg: running [2025-08-22 13:54:53][350256190361158][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-22 13:54:53][350256190361158][262 ms][DEBUG] START check_boot_completed [2025-08-22 13:54:53][350256190361158][262 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:54:53][350256190361158][293 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:54:53][350256190361158][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:54:53][350256190361158][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:54:53][350256190361158][341 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:54:53][350256190361158][341 ms][DEBUG] START check_internet [2025-08-22 13:54:53][350256190361158][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:54:54][350256190361158][669 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=214 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 214.588/214.588/214.588/0.000 ms\n [2025-08-22 13:54:54][350256190361158][669 ms][DEBUG] check_internet: online [2025-08-22 13:54:54][350256190361158][669 ms][DEBUG] END check_internet in 328 ms [2025-08-22 13:54:54][350256190361158][669 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:54:54][350256190361158][669 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256190361158\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX1547BDA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ATS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2319\"}'\'' -e'"" [2025-08-22 13:54:54][350256190361158][669 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:54:54][350256190361158][669 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256190361158\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX1547BDA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ATS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2319\"}'\'' -e'"" [2025-08-22 13:54:58][350256190361158][5058 ms][DEBUG] proc_open done in 4389 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 13:54:58][350256190361158][5058 ms][DEBUG] END runCmdUntilRes#1 in 4389 ms [2025-08-22 13:54:58][350256190361158][5058 ms][WARN] Detected error: Process with pid 8844 either refused to load frida-agent, or terminated during injection [2025-08-22 13:54:58][350256190361158][5058 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:54:58][350256190361158][5199 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 13:54:58][350256190361158][5199 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:54:58][350256190361158][5199 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:54:58][350256190361158][5324 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 13:54:58][350256190361158][5324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:54:58][350256190361158][5496 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:55:00][350256190361158][7510 ms][DEBUG] START check_boot_completed [2025-08-22 13:55:00][350256190361158][7511 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:55:00][350256190361158][7557 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:55:00][350256190361158][7557 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:55:01][350256190361158][7604 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:55:01][350256190361158][7604 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:55:02][350287313077868][0 ms][INFO] === Request start === [2025-08-22 13:55:04][350256190361158][10619 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:55:04][350256190361158][10619 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350256190361158\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX1547BDA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ATS\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2319\"}'\'' -e'"" [2025-08-22 13:55:08][350256190361158][14821 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_646c4863-fd52-4401-83ac-ed083c2d1e2a","id":"QR_646c4863-fd52-4401-83ac-ed083c2d1e2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:55:08][350256190361158][14977 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3152 [2025-08-22 13:55:08][350256190361158][14977 ms][DEBUG] END runCmdUntilRes#2 in 4358 ms [2025-08-22 13:55:08][350256190361158][14978 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:55:08][350287313077868][6090 ms][DEBUG] START check_scloud [2025-08-22 13:55:08][350287313077868][6091 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:55:09][350287313077868][6340 ms][DEBUG] SU: done in 250 ms; outu0_a118 18606 4966 23701144 124712 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:55:09][350287313077868][6341 ms][DEBUG] targetPkg: running [2025-08-22 13:55:09][350287313077868][6341 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 13:55:09][350287313077868][6341 ms][DEBUG] START check_boot_completed [2025-08-22 13:55:09][350287313077868][6341 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:55:09][350287313077868][6387 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:55:09][350287313077868][6387 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:55:09][350287313077868][6436 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 13:55:09][350287313077868][6436 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 13:55:09][350287313077868][6436 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:55:09][350287313077868][6436 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313077868\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0CN0HH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7234\"}'\'' -e'"" [2025-08-22 13:55:09][350287313077868][6436 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:55:09][350287313077868][6436 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287313077868\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0CN0HH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7234\"}'\'' -e'"" [2025-08-22 13:55:13][350287313077868][10105 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5e69c23-9dc2-4356-84e5-62ed15210f05","id":"QR_c5e69c23-9dc2-4356-84e5-62ed15210f05","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:55:13][350287313077868][10261 ms][DEBUG] proc_open done in 3825 ms; code=255; res.len=3152 [2025-08-22 13:55:13][350287313077868][10262 ms][DEBUG] END runCmdUntilRes#1 in 3826 ms [2025-08-22 13:55:13][350287313077868][10262 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:55:27][352600222030372][0 ms][INFO] === Request start === [2025-08-22 13:55:27][352600222030372][1 ms][DEBUG] START check_scloud [2025-08-22 13:55:27][352600222030372][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:55:27][352600222030372][299 ms][DEBUG] SU: done in 297 ms; outu0_a118 18606 4966 23876776 138448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:55:27][352600222030372][299 ms][DEBUG] targetPkg: running [2025-08-22 13:55:27][352600222030372][299 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 13:55:27][352600222030372][299 ms][DEBUG] START check_boot_completed [2025-08-22 13:55:27][352600222030372][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:55:27][352600222030372][344 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 13:55:27][352600222030372][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:55:27][352600222030372][438 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 13:55:27][352600222030372][438 ms][DEBUG] END check_boot_completed in 139 ms [2025-08-22 13:55:27][352600222030372][438 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:55:27][352600222030372][438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600222030372\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y40REP0Z\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3058\"}'\'' -e'"" [2025-08-22 13:55:27][352600222030372][438 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:55:27][352600222030372][438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600222030372\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y40REP0Z\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3058\"}'\'' -e'"" [2025-08-22 13:55:31][352838656583090][1 ms][INFO] === Request start === [2025-08-22 13:55:31][352600222030372][4499 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_dfc19566-aa00-4480-943e-11723ffdf3c8","id":"QR_dfc19566-aa00-4480-943e-11723ffdf3c8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:55:31][352600222030372][4655 ms][DEBUG] proc_open done in 4217 ms; code=255; res.len=3152 [2025-08-22 13:55:31][352600222030372][4656 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-22 13:55:31][352600222030372][4656 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:55:32][352838656583090][1016 ms][DEBUG] START check_scloud [2025-08-22 13:55:32][352838656583090][1016 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:55:32][352838656583090][1266 ms][DEBUG] SU: done in 250 ms; outu0_a118 18606 4966 23975900 150604 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:55:32][352838656583090][1266 ms][DEBUG] targetPkg: running [2025-08-22 13:55:32][352838656583090][1266 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 13:55:32][352838656583090][1266 ms][DEBUG] START check_boot_completed [2025-08-22 13:55:32][352838656583090][1266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:55:32][352838656583090][1312 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:55:32][352838656583090][1312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:55:32][352838656583090][1359 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:55:32][352838656583090][1360 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:55:32][352838656583090][1360 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:55:32][352838656583090][1360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656583090\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWB077PGJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6909\"}'\'' -e'"" [2025-08-22 13:55:32][352838656583090][1360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:55:32][352838656583090][1360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352838656583090\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCWB077PGJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6909\"}'\'' -e'"" [2025-08-22 13:55:36][352838656583090][5140 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8b16ed0-64b1-479b-b507-92aa357726a6","id":"QR_e8b16ed0-64b1-479b-b507-92aa357726a6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:55:36][352838656583090][5296 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3152 [2025-08-22 13:55:36][352838656583090][5296 ms][DEBUG] END runCmdUntilRes#1 in 3936 ms [2025-08-22 13:55:36][352838656583090][5296 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:56:07][352469854050045][0 ms][INFO] === Request start === [2025-08-22 13:56:07][352469854050045][1 ms][DEBUG] START check_scloud [2025-08-22 13:56:07][352469854050045][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:56:07][352469854050045][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18606 4966 24112220 161356 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:56:07][352469854050045][307 ms][DEBUG] targetPkg: running [2025-08-22 13:56:07][352469854050045][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 13:56:07][352469854050045][307 ms][DEBUG] START check_boot_completed [2025-08-22 13:56:07][352469854050045][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:56:08][352469854050045][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:56:08][352469854050045][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:56:08][352469854050045][432 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:56:08][352469854050045][432 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 13:56:08][352469854050045][432 ms][DEBUG] START check_internet [2025-08-22 13:56:08][352469854050045][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:56:08][352469854050045][869 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.888/201.888/201.888/0.000 ms\n [2025-08-22 13:56:08][352469854050045][869 ms][DEBUG] check_internet: online [2025-08-22 13:56:08][352469854050045][869 ms][DEBUG] END check_internet in 438 ms [2025-08-22 13:56:08][352469854050045][869 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:56:08][352469854050045][869 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854050045\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T429ZCLF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6256\"}'\'' -e'"" [2025-08-22 13:56:08][352469854050045][869 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:56:08][352469854050045][869 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352469854050045\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58T429ZCLF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"THL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6256\"}'\'' -e'"" [2025-08-22 13:56:12][352469854050045][5040 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_db06b8bd-874e-456f-bd6a-bac9c8d56b24","id":"QR_db06b8bd-874e-456f-bd6a-bac9c8d56b24","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:56:12][352469854050045][5196 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3152 [2025-08-22 13:56:12][352469854050045][5196 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-22 13:56:12][352469854050045][5196 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:56:25][352879321733066][0 ms][INFO] === Request start === [2025-08-22 13:56:25][352879321733066][1 ms][DEBUG] START check_scloud [2025-08-22 13:56:25][352879321733066][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:56:25][352879321733066][298 ms][DEBUG] SU: done in 297 ms; outu0_a118 18606 4966 24287672 172340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:56:25][352879321733066][298 ms][DEBUG] targetPkg: running [2025-08-22 13:56:25][352879321733066][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 13:56:25][352879321733066][298 ms][DEBUG] START check_boot_completed [2025-08-22 13:56:25][352879321733066][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:56:25][352879321733066][329 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:56:25][352879321733066][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:56:25][352879321733066][392 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 13:56:25][352879321733066][392 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 13:56:25][352879321733066][392 ms][DEBUG] START check_internet [2025-08-22 13:56:25][352879321733066][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:56:26][352879321733066][782 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=260 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 260.915/260.915/260.915/0.000 ms\n [2025-08-22 13:56:26][352879321733066][783 ms][DEBUG] check_internet: online [2025-08-22 13:56:26][352879321733066][783 ms][DEBUG] END check_internet in 391 ms [2025-08-22 13:56:26][352879321733066][783 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:56:26][352879321733066][783 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879321733066\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2451\"}'\'' -e'"" [2025-08-22 13:56:26][352879321733066][783 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:56:26][352879321733066][783 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879321733066\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW90FJQKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2451\"}'\'' -e'"" [2025-08-22 13:56:29][352879321733066][4531 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_662661b2-b920-4882-b153-93ecee8c50d2","id":"QR_662661b2-b920-4882-b153-93ecee8c50d2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:56:29][352879321733066][4688 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=3152 [2025-08-22 13:56:29][352879321733066][4688 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-22 13:56:29][352879321733066][4688 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:57:11][352590527093169][1 ms][INFO] === Request start === [2025-08-22 13:57:11][352590527093169][2 ms][DEBUG] START check_scloud [2025-08-22 13:57:11][352590527093169][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:57:12][352590527093169][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 18606 4966 24375724 184624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:57:12][352590527093169][301 ms][DEBUG] targetPkg: running [2025-08-22 13:57:12][352590527093169][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 13:57:12][352590527093169][301 ms][DEBUG] START check_boot_completed [2025-08-22 13:57:12][352590527093169][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:57:12][352590527093169][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:57:12][352590527093169][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:57:12][352590527093169][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:57:12][352590527093169][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:57:12][352590527093169][410 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:57:12][352590527093169][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590527093169\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8095\"}'\'' -e'"" [2025-08-22 13:57:12][352590527093169][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:57:12][352590527093169][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590527093169\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8095\"}'\'' -e'"" [2025-08-22 13:57:15][352590527093169][4128 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 13:57:16][352590527093169][4284 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=115 [2025-08-22 13:57:16][352590527093169][4284 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-22 13:57:16][352590527093169][4284 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 13:57:16][][0 ms][INFO] === Request start === [2025-08-22 13:57:16][][1 ms][DEBUG] START check_scloud [2025-08-22 13:57:16][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:57:16][][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 18606 4966 24499892 195568 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:57:16][][294 ms][DEBUG] targetPkg: running [2025-08-22 13:57:16][][294 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 13:57:16][][294 ms][DEBUG] START check_boot_completed [2025-08-22 13:57:16][][294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:57:16][][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:57:16][][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:57:16][][403 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:57:16][][403 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:57:16][][403 ms][DEBUG] rawBody.length=1131 [2025-08-22 13:57:16][][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1135\"}'\'' -e'"" [2025-08-22 13:57:16][][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:57:16][][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1135\"}'\'' -e'"" [2025-08-22 13:57:20][351104344845263][0 ms][INFO] === Request start === [2025-08-22 13:57:20][][3933 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 13:57:20][][4090 ms][DEBUG] proc_open done in 3686 ms; code=255; res.len=107 [2025-08-22 13:57:20][][4090 ms][DEBUG] END runCmdUntilRes#1 in 3686 ms [2025-08-22 13:57:20][][4090 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 13:57:20][][0 ms][INFO] === Request start === [2025-08-22 13:57:20][][1 ms][DEBUG] START check_scloud [2025-08-22 13:57:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:57:21][][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 18606 4966 24656828 207232 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:57:21][][307 ms][DEBUG] targetPkg: running [2025-08-22 13:57:21][][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 13:57:21][][307 ms][DEBUG] START check_boot_completed [2025-08-22 13:57:21][][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:57:21][][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 13:57:21][][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:57:21][][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:57:21][][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 13:57:21][][386 ms][DEBUG] rawBody.length=1131 [2025-08-22 13:57:21][][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5945\"}'\'' -e'"" [2025-08-22 13:57:21][][386 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:57:21][][386 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A536B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5945\"}'\'' -e'"" [2025-08-22 13:57:24][][3900 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 13:57:24][][4056 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=107 [2025-08-22 13:57:24][][4056 ms][DEBUG] END runCmdUntilRes#1 in 3671 ms [2025-08-22 13:57:24][][4056 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 13:57:25][351104344845263][5068 ms][DEBUG] START check_scloud [2025-08-22 13:57:25][351104344845263][5068 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:57:25][351104344845263][5334 ms][DEBUG] SU: done in 266 ms; outu0_a118 18606 4966 24795332 217952 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:57:25][351104344845263][5334 ms][DEBUG] targetPkg: running [2025-08-22 13:57:25][351104344845263][5334 ms][DEBUG] END check_scloud in 266 ms [2025-08-22 13:57:25][351104344845263][5334 ms][DEBUG] START check_boot_completed [2025-08-22 13:57:25][351104344845263][5334 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:57:25][351104344845263][5381 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:57:25][351104344845263][5381 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:57:25][351104344845263][5475 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 13:57:25][351104344845263][5475 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-22 13:57:25][351104344845263][5475 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:57:25][351104344845263][5475 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104344845263\",\"model\":\"SM-A166B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY51E386W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7600\"}'\'' -e'"" [2025-08-22 13:57:25][351104344845263][5475 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:57:25][351104344845263][5475 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351104344845263\",\"model\":\"SM-A166B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CY51E386W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7600\"}'\'' -e'"" [2025-08-22 13:57:26][352590527093169][0 ms][INFO] === Request start === [2025-08-22 13:57:29][351104344845263][9317 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_88f62381-f43b-4a46-944c-a88b440febc9","id":"QR_88f62381-f43b-4a46-944c-a88b440febc9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:57:29][351104344845263][9473 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3152 [2025-08-22 13:57:29][351104344845263][9473 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-22 13:57:29][351104344845263][9474 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:57:29][352590527093169][3040 ms][DEBUG] START check_scloud [2025-08-22 13:57:29][352590527093169][3040 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:57:30][352590527093169][3352 ms][DEBUG] SU: done in 312 ms; outu0_a118 18606 4966 24960332 229648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:57:30][352590527093169][3352 ms][DEBUG] targetPkg: running [2025-08-22 13:57:30][352590527093169][3353 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 13:57:30][352590527093169][3353 ms][DEBUG] START check_boot_completed [2025-08-22 13:57:30][352590527093169][3353 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:57:30][352590527093169][3399 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:57:30][352590527093169][3399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:57:30][352590527093169][3462 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:57:30][352590527093169][3462 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:57:30][352590527093169][3462 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:57:30][352590527093169][3462 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590527093169\",\"model\":\"SM-A536B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1878\"}'\'' -e'"" [2025-08-22 13:57:30][352590527093169][3462 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:57:30][352590527093169][3462 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352590527093169\",\"model\":\"SM-A536B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCT90Y8T5B\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1878\"}'\'' -e'"" [2025-08-22 13:57:35][352590527093169][8164 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9155d8ea-006f-411f-b2f0-bccce8924d17","id":"QR_9155d8ea-006f-411f-b2f0-bccce8924d17","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:57:35][352590527093169][8320 ms][DEBUG] proc_open done in 4858 ms; code=255; res.len=3152 [2025-08-22 13:57:35][352590527093169][8320 ms][DEBUG] END runCmdUntilRes#1 in 4858 ms [2025-08-22 13:57:35][352590527093169][8320 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:57:39][352513123785376][0 ms][INFO] === Request start === [2025-08-22 13:57:39][352513123785376][1 ms][DEBUG] START check_scloud [2025-08-22 13:57:39][352513123785376][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:57:40][352513123785376][255 ms][DEBUG] SU: done in 254 ms; outu0_a118 18606 4966 25057804 241796 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:57:40][352513123785376][255 ms][DEBUG] targetPkg: running [2025-08-22 13:57:40][352513123785376][255 ms][DEBUG] END check_scloud in 254 ms [2025-08-22 13:57:40][352513123785376][255 ms][DEBUG] START check_boot_completed [2025-08-22 13:57:40][352513123785376][255 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:57:40][352513123785376][302 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:57:40][352513123785376][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:57:40][352513123785376][348 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:57:40][352513123785376][348 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:57:40][352513123785376][348 ms][DEBUG] rawBody.length=1160 [2025-08-22 13:57:40][352513123785376][348 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352513123785376\",\"model\":\"SM-A166U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY13CZNZT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9445\"}'\'' -e'"" [2025-08-22 13:57:40][352513123785376][348 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:57:40][352513123785376][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352513123785376\",\"model\":\"SM-A166U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY13CZNZT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9445\"}'\'' -e'"" [2025-08-22 13:57:42][353578855602080][1 ms][INFO] === Request start === [2025-08-22 13:57:44][352513123785376][4238 ms][DEBUG] proc_open done in 3890 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 13:57:44][352513123785376][4238 ms][DEBUG] END runCmdUntilRes#1 in 3890 ms [2025-08-22 13:57:44][352513123785376][4239 ms][WARN] Detected error: Process with pid 18606 either refused to load frida-agent, or terminated during injection [2025-08-22 13:57:44][352513123785376][4239 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 13:57:44][352513123785376][4410 ms][DEBUG] SU: done in 171 ms; out [2025-08-22 13:57:44][352513123785376][4410 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 13:57:44][352513123785376][4410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 13:57:44][352513123785376][4535 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 13:57:44][352513123785376][4535 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 13:57:44][352513123785376][4691 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 13:57:46][352513123785376][6706 ms][DEBUG] START check_boot_completed [2025-08-22 13:57:46][352513123785376][6706 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:57:46][352513123785376][6753 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:57:46][352513123785376][6753 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:57:46][352513123785376][6831 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 13:57:46][352513123785376][6832 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 13:57:49][352513123785376][9846 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 13:57:49][352513123785376][9846 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352513123785376\",\"model\":\"SM-A166U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CY13CZNZT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CCT\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9445\"}'\'' -e'"" [2025-08-22 13:57:55][352513123785376][15111 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8c720d49-760a-49b9-9742-909f96e5b03b","id":"QR_8c720d49-760a-49b9-9742-909f96e5b03b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:57:55][352513123785376][15267 ms][DEBUG] proc_open done in 5421 ms; code=255; res.len=3152 [2025-08-22 13:57:55][352513123785376][15267 ms][DEBUG] END runCmdUntilRes#2 in 5421 ms [2025-08-22 13:57:55][352513123785376][15267 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:57:55][353578855602080][13189 ms][DEBUG] START check_scloud [2025-08-22 13:57:55][353578855602080][13190 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:57:56][353578855602080][13440 ms][DEBUG] SU: done in 250 ms; outu0_a118 19771 4966 23722140 124448 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:57:56][353578855602080][13440 ms][DEBUG] targetPkg: running [2025-08-22 13:57:56][353578855602080][13440 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 13:57:56][353578855602080][13440 ms][DEBUG] START check_boot_completed [2025-08-22 13:57:56][353578855602080][13440 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:57:56][353578855602080][13486 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:57:56][353578855602080][13486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:57:56][353578855602080][13533 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 13:57:56][353578855602080][13533 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 13:57:56][353578855602080][13533 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:57:56][353578855602080][13533 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353578855602080\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX5041GDF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1040\"}'\'' -e'"" [2025-08-22 13:57:56][353578855602080][13533 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:57:56][353578855602080][13533 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353578855602080\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX5041GDF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1040\"}'\'' -e'"" [2025-08-22 13:58:00][353578855602080][17766 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1463ef6d-9b07-4832-8b9f-a31e4a5d9669","id":"QR_1463ef6d-9b07-4832-8b9f-a31e4a5d9669","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:58:00][353578855602080][17923 ms][DEBUG] proc_open done in 4390 ms; code=255; res.len=3152 [2025-08-22 13:58:00][353578855602080][17923 ms][DEBUG] END runCmdUntilRes#1 in 4390 ms [2025-08-22 13:58:00][353578855602080][17923 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:58:41][351272334053683][0 ms][INFO] === Request start === [2025-08-22 13:58:41][351272334053683][1 ms][DEBUG] START check_scloud [2025-08-22 13:58:41][351272334053683][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:58:42][351272334053683][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 19771 4966 23823380 137996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:58:42][351272334053683][316 ms][DEBUG] targetPkg: running [2025-08-22 13:58:42][351272334053683][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 13:58:42][351272334053683][316 ms][DEBUG] START check_boot_completed [2025-08-22 13:58:42][351272334053683][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:58:42][351272334053683][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 13:58:42][351272334053683][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:58:42][351272334053683][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 13:58:42][351272334053683][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 13:58:42][351272334053683][426 ms][DEBUG] START check_internet [2025-08-22 13:58:42][351272334053683][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 13:58:42][351272334053683][722 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=173 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 173.460/173.460/173.460/0.000 ms\n [2025-08-22 13:58:42][351272334053683][722 ms][DEBUG] check_internet: online [2025-08-22 13:58:42][351272334053683][722 ms][DEBUG] END check_internet in 297 ms [2025-08-22 13:58:42][351272334053683][723 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:58:42][351272334053683][723 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334053683\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y409ZKSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-08-22 13:58:42][351272334053683][723 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:58:42][351272334053683][723 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351272334053683\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y409ZKSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1974\"}'\'' -e'"" [2025-08-22 13:58:46][351272334053683][4862 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_77a70225-ab4d-47d1-8b0c-08410e8d9034","id":"QR_77a70225-ab4d-47d1-8b0c-08410e8d9034","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:58:46][351272334053683][5018 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3152 [2025-08-22 13:58:46][351272334053683][5018 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-22 13:58:46][351272334053683][5018 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 13:59:06][353040470080960][0 ms][INFO] === Request start === [2025-08-22 13:59:06][353040470080960][1 ms][DEBUG] START check_scloud [2025-08-22 13:59:06][353040470080960][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 13:59:06][353040470080960][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 19771 4966 23955576 149360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 13:59:06][353040470080960][307 ms][DEBUG] targetPkg: running [2025-08-22 13:59:06][353040470080960][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 13:59:06][353040470080960][307 ms][DEBUG] START check_boot_completed [2025-08-22 13:59:06][353040470080960][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 13:59:06][353040470080960][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 13:59:06][353040470080960][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 13:59:06][353040470080960][402 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 13:59:06][353040470080960][402 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 13:59:06][353040470080960][402 ms][DEBUG] rawBody.length=1161 [2025-08-22 13:59:06][353040470080960][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353040470080960\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R68X100J8YY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4249\"}'\'' -e'"" [2025-08-22 13:59:06][353040470080960][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 13:59:06][353040470080960][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353040470080960\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R68X100J8YY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TUR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4249\"}'\'' -e'"" [2025-08-22 13:59:10][353040470080960][4462 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c7b4d621-3584-4ddc-a397-74c2653d810e","id":"QR_c7b4d621-3584-4ddc-a397-74c2653d810e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 13:59:11][353040470080960][4618 ms][DEBUG] proc_open done in 4216 ms; code=255; res.len=3152 [2025-08-22 13:59:11][353040470080960][4618 ms][DEBUG] END runCmdUntilRes#1 in 4216 ms [2025-08-22 13:59:11][353040470080960][4618 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:02:06][350900923333659][1 ms][INFO] === Request start === [2025-08-22 14:02:06][350900923333659][2 ms][DEBUG] START check_scloud [2025-08-22 14:02:06][350900923333659][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:02:07][350900923333659][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 19771 4966 24062024 160580 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:02:07][350900923333659][318 ms][DEBUG] targetPkg: running [2025-08-22 14:02:07][350900923333659][318 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 14:02:07][350900923333659][318 ms][DEBUG] START check_boot_completed [2025-08-22 14:02:07][350900923333659][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:02:07][350900923333659][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:02:07][350900923333659][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:02:07][350900923333659][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:02:07][350900923333659][412 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:02:07][350900923333659][412 ms][DEBUG] START check_internet [2025-08-22 14:02:07][350900923333659][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:02:07][350900923333659][880 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.017/197.017/197.017/0.000 ms\n [2025-08-22 14:02:07][350900923333659][880 ms][DEBUG] check_internet: online [2025-08-22 14:02:07][350900923333659][880 ms][DEBUG] END check_internet in 468 ms [2025-08-22 14:02:07][350900923333659][880 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:02:07][350900923333659][880 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900923333659\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC0G24YH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2713\"}'\'' -e'"" [2025-08-22 14:02:07][350900923333659][880 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:02:07][350900923333659][880 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900923333659\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC0G24YH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2713\"}'\'' -e'"" [2025-08-22 14:02:12][350900923333659][5082 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e3579de-0b60-4d10-827a-716be36baa78","id":"QR_5e3579de-0b60-4d10-827a-716be36baa78","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:02:12][350900923333659][5238 ms][DEBUG] proc_open done in 4358 ms; code=255; res.len=3152 [2025-08-22 14:02:12][350900923333659][5238 ms][DEBUG] END runCmdUntilRes#1 in 4358 ms [2025-08-22 14:02:12][350900923333659][5238 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:02:19][356191105983305][0 ms][INFO] === Request start === [2025-08-22 14:02:19][356191105983305][1 ms][DEBUG] START check_scloud [2025-08-22 14:02:19][356191105983305][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:02:19][356191105983305][299 ms][DEBUG] SU: done in 298 ms; outu0_a118 19771 4966 24241360 171192 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:02:19][356191105983305][300 ms][DEBUG] targetPkg: running [2025-08-22 14:02:19][356191105983305][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 14:02:19][356191105983305][300 ms][DEBUG] START check_boot_completed [2025-08-22 14:02:19][356191105983305][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:02:19][356191105983305][346 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:02:19][356191105983305][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:02:19][356191105983305][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:02:19][356191105983305][393 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 14:02:19][356191105983305][393 ms][DEBUG] START check_internet [2025-08-22 14:02:19][356191105983305][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:02:19][356191105983305][752 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=232 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 232.701/232.701/232.701/0.000 ms\n [2025-08-22 14:02:19][356191105983305][753 ms][DEBUG] check_internet: online [2025-08-22 14:02:19][356191105983305][753 ms][DEBUG] END check_internet in 359 ms [2025-08-22 14:02:19][356191105983305][753 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:02:19][356191105983305][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356191105983305\",\"model\":\"SM-G970F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8M73WAYSL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5494\"}'\'' -e'"" [2025-08-22 14:02:19][356191105983305][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:02:19][356191105983305][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356191105983305\",\"model\":\"SM-G970F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8M73WAYSL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SER\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5494\"}'\'' -e'"" [2025-08-22 14:02:23][356191105983305][4439 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8cca937b-29fa-4463-b3b0-4f13246526be","id":"QR_8cca937b-29fa-4463-b3b0-4f13246526be","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:02:23][356191105983305][4595 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3152 [2025-08-22 14:02:23][356191105983305][4595 ms][DEBUG] END runCmdUntilRes#1 in 3842 ms [2025-08-22 14:02:23][356191105983305][4595 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:02:51][356761460396259][0 ms][INFO] === Request start === [2025-08-22 14:02:51][356761460396259][1 ms][DEBUG] START check_scloud [2025-08-22 14:02:51][356761460396259][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:02:51][356761460396259][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 19771 4966 24373456 183032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:02:51][356761460396259][303 ms][DEBUG] targetPkg: running [2025-08-22 14:02:51][356761460396259][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 14:02:51][356761460396259][303 ms][DEBUG] START check_boot_completed [2025-08-22 14:02:51][356761460396259][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:02:51][356761460396259][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:02:51][356761460396259][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:02:51][356761460396259][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:02:51][356761460396259][412 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:02:51][356761460396259][412 ms][DEBUG] START check_internet [2025-08-22 14:02:51][356761460396259][412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:02:52][356761460396259][693 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=172 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 172.847/172.847/172.847/0.000 ms\n [2025-08-22 14:02:52][356761460396259][693 ms][DEBUG] check_internet: online [2025-08-22 14:02:52][356761460396259][693 ms][DEBUG] END check_internet in 281 ms [2025-08-22 14:02:52][356761460396259][693 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:02:52][356761460396259][694 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356761460396259\",\"model\":\"SM-S916B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW10THHFZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9459\"}'\'' -e'"" [2025-08-22 14:02:52][356761460396259][694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:02:52][356761460396259][694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356761460396259\",\"model\":\"SM-S916B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW10THHFZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9459\"}'\'' -e'"" [2025-08-22 14:02:55][356761460396259][4536 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8db8067-ba6a-4804-a5c3-0cb242eeec1c","id":"QR_e8db8067-ba6a-4804-a5c3-0cb242eeec1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:02:56][356761460396259][4692 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=3152 [2025-08-22 14:02:56][356761460396259][4692 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-22 14:02:56][356761460396259][4692 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:03:34][352961652210417][0 ms][INFO] === Request start === [2025-08-22 14:03:34][352961652210417][1 ms][DEBUG] START check_scloud [2025-08-22 14:03:34][352961652210417][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:03:34][352961652210417][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 19771 4966 24495476 193968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:03:34][352961652210417][305 ms][DEBUG] targetPkg: running [2025-08-22 14:03:34][352961652210417][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 14:03:34][352961652210417][305 ms][DEBUG] START check_boot_completed [2025-08-22 14:03:34][352961652210417][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:03:34][352961652210417][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:03:34][352961652210417][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:03:34][352961652210417][414 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:03:34][352961652210417][414 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:03:34][352961652210417][414 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:03:34][352961652210417][414 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961652210417\",\"model\":\"SM-M336K\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT50X63ZN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2744\"}'\'' -e'"" [2025-08-22 14:03:34][352961652210417][414 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:03:34][352961652210417][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352961652210417\",\"model\":\"SM-M336K\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT50X63ZN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2744\"}'\'' -e'"" [2025-08-22 14:03:38][352961652210417][4725 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_df3b7ee0-8049-49c6-8524-b754ee370cb5","id":"QR_df3b7ee0-8049-49c6-8524-b754ee370cb5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:03:38][352961652210417][4881 ms][DEBUG] proc_open done in 4467 ms; code=255; res.len=3152 [2025-08-22 14:03:38][352961652210417][4882 ms][DEBUG] END runCmdUntilRes#1 in 4467 ms [2025-08-22 14:03:38][352961652210417][4882 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:03:49][358438733658587][0 ms][INFO] === Request start === [2025-08-22 14:03:49][358438733658587][1 ms][DEBUG] START check_scloud [2025-08-22 14:03:49][358438733658587][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:03:49][358438733658587][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 19771 4966 24631804 205700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:03:49][358438733658587][306 ms][DEBUG] targetPkg: running [2025-08-22 14:03:49][358438733658587][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 14:03:49][358438733658587][306 ms][DEBUG] START check_boot_completed [2025-08-22 14:03:49][358438733658587][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:03:49][358438733658587][353 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:03:49][358438733658587][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:03:49][358438733658587][400 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:03:49][358438733658587][400 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 14:03:49][358438733658587][400 ms][DEBUG] rawBody.length=1160 [2025-08-22 14:03:49][358438733658587][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438733658587\",\"model\":\"SM-A155F\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9075\"}'\'' -e'"" [2025-08-22 14:03:49][358438733658587][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:03:49][358438733658587][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358438733658587\",\"model\":\"SM-A155F\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X7048XEJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9075\"}'\'' -e'"" [2025-08-22 14:03:55][358438733658587][5851 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_032a5982-c323-4e4c-9f25-eb86bda4269a","id":"QR_032a5982-c323-4e4c-9f25-eb86bda4269a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:03:55][358438733658587][6008 ms][DEBUG] proc_open done in 5608 ms; code=255; res.len=3152 [2025-08-22 14:03:55][358438733658587][6008 ms][DEBUG] END runCmdUntilRes#1 in 5608 ms [2025-08-22 14:03:55][358438733658587][6008 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:07:08][358423446580476][1 ms][INFO] === Request start === [2025-08-22 14:07:08][358423446580476][2 ms][DEBUG] START check_scloud [2025-08-22 14:07:08][358423446580476][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:07:08][358423446580476][257 ms][DEBUG] SU: done in 255 ms; outu0_a118 19771 4966 24776380 216444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:07:08][358423446580476][257 ms][DEBUG] targetPkg: running [2025-08-22 14:07:08][358423446580476][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-22 14:07:08][358423446580476][257 ms][DEBUG] START check_boot_completed [2025-08-22 14:07:08][358423446580476][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:07:08][358423446580476][288 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 14:07:08][358423446580476][288 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:07:09][358423446580476][335 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:07:09][358423446580476][335 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 14:07:09][358423446580476][335 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:07:09][358423446580476][335 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358423446580476\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX60FFACY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1056\"}'\'' -e'"" [2025-08-22 14:07:09][358423446580476][335 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:07:09][358423446580476][335 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358423446580476\",\"model\":\"SM-S928B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX60FFACY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1056\"}'\'' -e'"" [2025-08-22 14:07:13][358423446580476][4553 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_628365ad-689a-4586-8037-0a59db502196","id":"QR_628365ad-689a-4586-8037-0a59db502196","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:07:13][358423446580476][4709 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3152 [2025-08-22 14:07:13][358423446580476][4709 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-22 14:07:13][358423446580476][4709 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:07:37][355824557993924][0 ms][INFO] === Request start === [2025-08-22 14:07:37][355824557993924][1 ms][DEBUG] START check_scloud [2025-08-22 14:07:37][355824557993924][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:07:37][355824557993924][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 19771 4966 24879904 225252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:07:37][355824557993924][306 ms][DEBUG] targetPkg: running [2025-08-22 14:07:37][355824557993924][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 14:07:37][355824557993924][306 ms][DEBUG] START check_boot_completed [2025-08-22 14:07:37][355824557993924][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:07:37][355824557993924][351 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 14:07:37][355824557993924][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:07:37][355824557993924][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 14:07:37][355824557993924][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:07:37][355824557993924][399 ms][DEBUG] rawBody.length=1160 [2025-08-22 14:07:37][355824557993924][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824557993924\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00G98P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8212\"}'\'' -e'"" [2025-08-22 14:07:37][355824557993924][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:07:37][355824557993924][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355824557993924\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XA00G98P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8212\"}'\'' -e'"" [2025-08-22 14:07:43][355824557993924][5849 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d6a1d09c-3a75-4b91-96e0-6bd86fb34c0a","id":"QR_d6a1d09c-3a75-4b91-96e0-6bd86fb34c0a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:07:43][355824557993924][6006 ms][DEBUG] proc_open done in 5606 ms; code=255; res.len=3152 [2025-08-22 14:07:43][355824557993924][6006 ms][DEBUG] END runCmdUntilRes#1 in 5606 ms [2025-08-22 14:07:43][355824557993924][6006 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:08:06][355506800055953][0 ms][INFO] === Request start === [2025-08-22 14:08:06][355506800055953][1 ms][DEBUG] START check_scloud [2025-08-22 14:08:06][355506800055953][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:08:06][355506800055953][264 ms][DEBUG] SU: done in 263 ms; outu0_a118 19771 4966 25015812 208924 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:08:06][355506800055953][264 ms][DEBUG] targetPkg: running [2025-08-22 14:08:06][355506800055953][264 ms][DEBUG] END check_scloud in 263 ms [2025-08-22 14:08:06][355506800055953][264 ms][DEBUG] START check_boot_completed [2025-08-22 14:08:06][355506800055953][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:08:06][355506800055953][311 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:08:06][355506800055953][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:08:06][355506800055953][358 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:08:06][355506800055953][358 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:08:06][355506800055953][358 ms][DEBUG] START check_internet [2025-08-22 14:08:06][355506800055953][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:08:07][355506800055953][859 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.109/202.109/202.109/0.000 ms\n [2025-08-22 14:08:07][355506800055953][859 ms][DEBUG] check_internet: online [2025-08-22 14:08:07][355506800055953][859 ms][DEBUG] END check_internet in 501 ms [2025-08-22 14:08:07][355506800055953][859 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:08:07][355506800055953][859 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800055953\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W50S2ATV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7721\"}'\'' -e'"" [2025-08-22 14:08:07][355506800055953][859 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:08:07][355506800055953][859 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800055953\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W50S2ATV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7721\"}'\'' -e'"" [2025-08-22 14:08:11][355506800055953][4966 ms][DEBUG] proc_open done in 4107 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 14:08:11][355506800055953][4966 ms][DEBUG] END runCmdUntilRes#1 in 4107 ms [2025-08-22 14:08:11][355506800055953][4966 ms][WARN] Detected error: Process with pid 19771 either refused to load frida-agent, or terminated during injection [2025-08-22 14:08:11][355506800055953][4966 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 14:08:11][355506800055953][5107 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 14:08:11][355506800055953][5107 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 14:08:11][355506800055953][5107 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:08:11][355506800055953][5247 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 14:08:11][355506800055953][5247 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:08:11][355506800055953][5404 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 14:08:13][355506800055953][7418 ms][DEBUG] START check_boot_completed [2025-08-22 14:08:13][355506800055953][7418 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:08:13][355506800055953][7465 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:08:13][355506800055953][7465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:08:13][355506800055953][7512 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:08:13][355506800055953][7512 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:08:16][355506800055953][10527 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 14:08:16][355506800055953][10527 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355506800055953\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58W50S2ATV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7721\"}'\'' -e'"" [2025-08-22 14:08:20][355506800055953][14573 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63db4c2c-5960-4950-af66-90f47a483953","id":"QR_63db4c2c-5960-4950-af66-90f47a483953","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:08:20][355506800055953][14729 ms][DEBUG] proc_open done in 4202 ms; code=255; res.len=3152 [2025-08-22 14:08:20][355506800055953][14729 ms][DEBUG] END runCmdUntilRes#2 in 4202 ms [2025-08-22 14:08:20][355506800055953][14729 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:09:07][351406759166931][0 ms][INFO] === Request start === [2025-08-22 14:09:07][351406759166931][1 ms][DEBUG] START check_scloud [2025-08-22 14:09:07][351406759166931][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:09:07][351406759166931][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 21620 4966 23557012 127184 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:09:07][351406759166931][251 ms][DEBUG] targetPkg: running [2025-08-22 14:09:07][351406759166931][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 14:09:07][351406759166931][251 ms][DEBUG] START check_boot_completed [2025-08-22 14:09:07][351406759166931][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:09:07][351406759166931][298 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:09:07][351406759166931][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:09:07][351406759166931][360 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:09:07][351406759166931][360 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:09:07][351406759166931][360 ms][DEBUG] rawBody.length=1160 [2025-08-22 14:09:07][351406759166931][360 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406759166931\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCW4090V2N\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4150\"}'\'' -e'"" [2025-08-22 14:09:07][351406759166931][360 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:09:07][351406759166931][360 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351406759166931\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCW4090V2N\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4150\"}'\'' -e'"" [2025-08-22 14:09:13][351406759166931][6406 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5ab41d9c-9f84-40da-a862-71749e585d38","id":"QR_5ab41d9c-9f84-40da-a862-71749e585d38","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:09:13][351406759166931][6562 ms][DEBUG] proc_open done in 6201 ms; code=255; res.len=3152 [2025-08-22 14:09:13][351406759166931][6562 ms][DEBUG] END runCmdUntilRes#1 in 6202 ms [2025-08-22 14:09:13][351406759166931][6562 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:10:07][355014520254030][1 ms][INFO] === Request start === [2025-08-22 14:10:07][355014520254030][2 ms][DEBUG] START check_scloud [2025-08-22 14:10:07][355014520254030][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:10:08][355014520254030][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 21620 4966 23668728 137640 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:10:08][355014520254030][305 ms][DEBUG] targetPkg: running [2025-08-22 14:10:08][355014520254030][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 14:10:08][355014520254030][305 ms][DEBUG] START check_boot_completed [2025-08-22 14:10:08][355014520254030][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:10:08][355014520254030][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:10:08][355014520254030][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:10:08][355014520254030][398 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:10:08][355014520254030][398 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 14:10:08][355014520254030][398 ms][DEBUG] START check_internet [2025-08-22 14:10:08][355014520254030][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:10:08][355014520254030][867 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.178/202.178/202.178/0.000 ms\n [2025-08-22 14:10:08][355014520254030][867 ms][DEBUG] check_internet: online [2025-08-22 14:10:08][355014520254030][868 ms][DEBUG] END check_internet in 469 ms [2025-08-22 14:10:08][355014520254030][868 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:10:08][355014520254030][868 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355014520254030\",\"model\":\"SM-S906E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT41KGV0H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6830\"}'\'' -e'"" [2025-08-22 14:10:08][355014520254030][868 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:10:08][355014520254030][868 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355014520254030\",\"model\":\"SM-S906E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCT41KGV0H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6830\"}'\'' -e'"" [2025-08-22 14:10:12][355014520254030][5131 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_750064be-a44a-4f6f-893c-421923eb96b2","id":"QR_750064be-a44a-4f6f-893c-421923eb96b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:10:13][355014520254030][5287 ms][DEBUG] proc_open done in 4420 ms; code=255; res.len=3152 [2025-08-22 14:10:13][355014520254030][5287 ms][DEBUG] END runCmdUntilRes#1 in 4420 ms [2025-08-22 14:10:13][355014520254030][5287 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:11:06][350013883884016][1 ms][INFO] === Request start === [2025-08-22 14:11:06][350013883884016][2 ms][DEBUG] START check_scloud [2025-08-22 14:11:06][350013883884016][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:11:06][350013883884016][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 21620 4966 23769040 149328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:11:06][350013883884016][292 ms][DEBUG] targetPkg: running [2025-08-22 14:11:06][350013883884016][292 ms][DEBUG] END check_scloud in 290 ms [2025-08-22 14:11:06][350013883884016][292 ms][DEBUG] START check_boot_completed [2025-08-22 14:11:06][350013883884016][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:11:06][350013883884016][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:11:06][350013883884016][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:11:06][350013883884016][386 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 14:11:06][350013883884016][387 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 14:11:06][350013883884016][387 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:11:06][350013883884016][387 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883884016\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB1ZL7WJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3968\"}'\'' -e'"" [2025-08-22 14:11:06][350013883884016][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:11:06][350013883884016][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013883884016\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TB1ZL7WJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3968\"}'\'' -e'"" [2025-08-22 14:11:10][350013883884016][4275 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_846fbe2c-7dfb-4863-9786-39441795463e","id":"QR_846fbe2c-7dfb-4863-9786-39441795463e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:11:10][350013883884016][4431 ms][DEBUG] proc_open done in 4044 ms; code=255; res.len=3152 [2025-08-22 14:11:10][350013883884016][4431 ms][DEBUG] END runCmdUntilRes#1 in 4044 ms [2025-08-22 14:11:10][350013883884016][4431 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:11:35][352549933784241][0 ms][INFO] === Request start === [2025-08-22 14:11:35][352549933784241][1 ms][DEBUG] START check_scloud [2025-08-22 14:11:35][352549933784241][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:11:35][352549933784241][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 21620 4966 23892012 160376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:11:35][352549933784241][310 ms][DEBUG] targetPkg: running [2025-08-22 14:11:35][352549933784241][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 14:11:35][352549933784241][310 ms][DEBUG] START check_boot_completed [2025-08-22 14:11:35][352549933784241][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:11:35][352549933784241][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:11:35][352549933784241][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:11:35][352549933784241][404 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:11:35][352549933784241][404 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 14:11:35][352549933784241][404 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:11:35][352549933784241][404 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933784241\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X8058CXX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1825\"}'\'' -e'"" [2025-08-22 14:11:35][352549933784241][404 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:11:35][352549933784241][404 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549933784241\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X8058CXX\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1825\"}'\'' -e'"" [2025-08-22 14:11:39][352549933784241][4340 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1d9849a8-e6b4-4b24-a544-f64f0003c64d","id":"QR_1d9849a8-e6b4-4b24-a544-f64f0003c64d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:11:39][352549933784241][4496 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3152 [2025-08-22 14:11:39][352549933784241][4496 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-22 14:11:39][352549933784241][4496 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:12:07][351681598211250][0 ms][INFO] === Request start === [2025-08-22 14:12:07][351681598211250][1 ms][DEBUG] START check_scloud [2025-08-22 14:12:07][351681598211250][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:12:08][351681598211250][306 ms][DEBUG] SU: done in 305 ms; outu0_a118 21620 4966 24034576 172260 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:12:08][351681598211250][306 ms][DEBUG] targetPkg: running [2025-08-22 14:12:08][351681598211250][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 14:12:08][351681598211250][306 ms][DEBUG] START check_boot_completed [2025-08-22 14:12:08][351681598211250][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:12:08][351681598211250][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:12:08][351681598211250][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:12:08][351681598211250][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:12:08][351681598211250][400 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:12:08][351681598211250][400 ms][DEBUG] START check_internet [2025-08-22 14:12:08][351681598211250][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:12:08][351681598211250][790 ms][DEBUG] SU: done in 390 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=270 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 270.089/270.089/270.089/0.000 ms\n [2025-08-22 14:12:08][351681598211250][790 ms][DEBUG] check_internet: online [2025-08-22 14:12:08][351681598211250][790 ms][DEBUG] END check_internet in 390 ms [2025-08-22 14:12:08][351681598211250][790 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:12:08][351681598211250][790 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681598211250\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X20A1FKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9952\"}'\'' -e'"" [2025-08-22 14:12:08][351681598211250][790 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:12:08][351681598211250][791 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351681598211250\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X20A1FKH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9952\"}'\'' -e'"" [2025-08-22 14:12:12][351681598211250][4601 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fb8d36ca-650f-4323-bd4d-bdfe85148ee1","id":"QR_fb8d36ca-650f-4323-bd4d-bdfe85148ee1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:12:12][351681598211250][4758 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3152 [2025-08-22 14:12:12][351681598211250][4758 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-22 14:12:12][351681598211250][4758 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:12:20][356923584613155][0 ms][INFO] === Request start === [2025-08-22 14:12:20][356923584613155][1 ms][DEBUG] START check_scloud [2025-08-22 14:12:20][356923584613155][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:12:20][356923584613155][298 ms][DEBUG] SU: done in 296 ms; outu0_a118 21620 4966 24158104 183076 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:12:20][356923584613155][298 ms][DEBUG] targetPkg: running [2025-08-22 14:12:20][356923584613155][298 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 14:12:20][356923584613155][298 ms][DEBUG] START check_boot_completed [2025-08-22 14:12:20][356923584613155][298 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:12:20][356923584613155][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:12:20][356923584613155][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:12:20][356923584613155][438 ms][DEBUG] SU: done in 93 ms; out [2025-08-22 14:12:20][356923584613155][438 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 14:12:20][356923584613155][438 ms][DEBUG] START check_internet [2025-08-22 14:12:20][356923584613155][438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:12:20][356923584613155][719 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=178 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 178.539/178.539/178.539/0.000 ms\n [2025-08-22 14:12:20][356923584613155][719 ms][DEBUG] check_internet: online [2025-08-22 14:12:20][356923584613155][720 ms][DEBUG] END check_internet in 282 ms [2025-08-22 14:12:20][356923584613155][720 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:12:20][356923584613155][720 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923584613155\",\"model\":\"SM-A156B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX325DPVH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4494\"}'\'' -e'"" [2025-08-22 14:12:20][356923584613155][720 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:12:20][356923584613155][720 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923584613155\",\"model\":\"SM-A156B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX325DPVH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4494\"}'\'' -e'"" [2025-08-22 14:12:24][356923584613155][4531 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7893bb2c-d97d-4783-bf3a-d5b8c58c6ade","id":"QR_7893bb2c-d97d-4783-bf3a-d5b8c58c6ade","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:12:24][356923584613155][4687 ms][DEBUG] proc_open done in 3967 ms; code=255; res.len=3152 [2025-08-22 14:12:24][356923584613155][4687 ms][DEBUG] END runCmdUntilRes#1 in 3967 ms [2025-08-22 14:12:24][356923584613155][4687 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:12:54][354994112948613][0 ms][INFO] === Request start === [2025-08-22 14:12:54][354994112948613][1 ms][DEBUG] START check_scloud [2025-08-22 14:12:54][354994112948613][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:12:54][352412373738989][1 ms][INFO] === Request start === [2025-08-22 14:12:54][354994112948613][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 21620 4966 24289368 195140 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:12:54][354994112948613][313 ms][DEBUG] targetPkg: running [2025-08-22 14:12:54][354994112948613][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 14:12:54][354994112948613][313 ms][DEBUG] START check_boot_completed [2025-08-22 14:12:54][354994112948613][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:12:54][355928816910270][0 ms][INFO] === Request start === [2025-08-22 14:12:54][354994112948613][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 14:12:54][354994112948613][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:12:54][354994112948613][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:12:54][354994112948613][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 14:12:54][354994112948613][391 ms][DEBUG] START check_internet [2025-08-22 14:12:54][354994112948613][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:12:54][351161646397419][1 ms][INFO] === Request start === [2025-08-22 14:12:55][354994112948613][735 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=236 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 236.505/236.505/236.505/0.000 ms\n [2025-08-22 14:12:55][354994112948613][735 ms][DEBUG] check_internet: online [2025-08-22 14:12:55][354994112948613][735 ms][DEBUG] END check_internet in 344 ms [2025-08-22 14:12:55][354994112948613][735 ms][DEBUG] rawBody.length=1159 [2025-08-22 14:12:55][354994112948613][735 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354994112948613\",\"model\":\"SM-X510\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X702JZGA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9384\"}'\'' -e'"" [2025-08-22 14:12:55][354994112948613][735 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:12:55][354994112948613][735 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354994112948613\",\"model\":\"SM-X510\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X702JZGA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9384\"}'\'' -e'"" [2025-08-22 14:13:01][354994112948613][7311 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee448053-c1d7-4a3d-9e25-d935924a0f9f","id":"QR_ee448053-c1d7-4a3d-9e25-d935924a0f9f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:13:01][354994112948613][7467 ms][DEBUG] proc_open done in 6732 ms; code=255; res.len=3152 [2025-08-22 14:13:01][354994112948613][7467 ms][DEBUG] END runCmdUntilRes#1 in 6733 ms [2025-08-22 14:13:01][354994112948613][7468 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:13:01][351161646397419][7097 ms][DEBUG] START check_scloud [2025-08-22 14:13:01][351161646397419][7097 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:13:02][351161646397419][7410 ms][DEBUG] SU: done in 312 ms; outu0_a118 21620 4966 24447228 206024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:13:02][351161646397419][7410 ms][DEBUG] targetPkg: running [2025-08-22 14:13:02][351161646397419][7410 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 14:13:02][351161646397419][7410 ms][DEBUG] START check_boot_completed [2025-08-22 14:13:02][351161646397419][7410 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:13:02][351161646397419][7456 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:13:02][351161646397419][7457 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:13:02][351161646397419][7519 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:13:02][351161646397419][7519 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:13:02][351161646397419][7519 ms][DEBUG] rawBody.length=1159 [2025-08-22 14:13:02][351161646397419][7519 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351161646397419\",\"model\":\"SM-T500\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TRB00LDNW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2050\"}'\'' -e'"" [2025-08-22 14:13:02][351161646397419][7519 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:13:02][351161646397419][7519 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351161646397419\",\"model\":\"SM-T500\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R9TRB00LDNW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2050\"}'\'' -e'"" [2025-08-22 14:13:07][351161646397419][12377 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4924409d-963b-4d7a-8c6e-7b539c39437a","id":"QR_4924409d-963b-4d7a-8c6e-7b539c39437a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:13:07][351161646397419][12533 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3152 [2025-08-22 14:13:07][351161646397419][12533 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-08-22 14:13:07][351161646397419][12534 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:13:07][352412373738989][13194 ms][DEBUG] START check_scloud [2025-08-22 14:13:07][352412373738989][13194 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:13:08][352412373738989][13491 ms][DEBUG] SU: done in 297 ms; outu0_a118 21620 4966 24581636 217132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:13:08][352412373738989][13491 ms][DEBUG] targetPkg: running [2025-08-22 14:13:08][352412373738989][13491 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 14:13:08][352412373738989][13491 ms][DEBUG] START check_boot_completed [2025-08-22 14:13:08][352412373738989][13491 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:13:08][352412373738989][13538 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:13:08][352412373738989][13538 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:13:08][352412373738989][13585 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:13:08][352412373738989][13585 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:13:08][352412373738989][13585 ms][DEBUG] rawBody.length=1159 [2025-08-22 14:13:08][352412373738989][13585 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352412373738989\",\"model\":\"SM-X510\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X4095T5L\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4127\"}'\'' -e'"" [2025-08-22 14:13:08][352412373738989][13585 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:13:08][352412373738989][13585 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352412373738989\",\"model\":\"SM-X510\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X4095T5L\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4127\"}'\'' -e'"" [2025-08-22 14:13:11][355928816910270][0 ms][INFO] === Request start === [2025-08-22 14:13:11][355928816910270][1 ms][DEBUG] START check_scloud [2025-08-22 14:13:11][355928816910270][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:13:11][355928816910270][286 ms][DEBUG] SU: done in 284 ms; outu0_a118 21620 4966 24732428 228760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:13:11][355928816910270][286 ms][DEBUG] targetPkg: running [2025-08-22 14:13:11][355928816910270][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-22 14:13:11][355928816910270][286 ms][DEBUG] START check_boot_completed [2025-08-22 14:13:11][355928816910270][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:13:12][355928816910270][332 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:13:12][355928816910270][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:13:12][355928816910270][411 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 14:13:12][355928816910270][411 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 14:13:12][355928816910270][411 ms][DEBUG] rawBody.length=1159 [2025-08-22 14:13:12][355928816910270][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928816910270\",\"model\":\"SM-T733\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R80C0EYZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6864\"}'\'' -e'"" [2025-08-22 14:13:12][355928816910270][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:13:12][355928816910270][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355928816910270\",\"model\":\"SM-T733\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52R80C0EYZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6864\"}'\'' -e'"" [2025-08-22 14:13:13][352412373738989][18693 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c310aff3-b1bf-4486-9bc5-b2f2f341faeb","id":"QR_c310aff3-b1bf-4486-9bc5-b2f2f341faeb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:13:13][352412373738989][18849 ms][DEBUG] proc_open done in 5264 ms; code=255; res.len=3152 [2025-08-22 14:13:13][352412373738989][18849 ms][DEBUG] END runCmdUntilRes#1 in 5264 ms [2025-08-22 14:13:13][352412373738989][18849 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:13:16][355928816910270][5269 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_daf524a1-a4c4-49f9-b7c2-32fbb97416f5","id":"QR_daf524a1-a4c4-49f9-b7c2-32fbb97416f5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:13:17][355928816910270][5425 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3152 [2025-08-22 14:13:17][355928816910270][5425 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-08-22 14:13:17][355928816910270][5425 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:17:06][350824191815231][1 ms][INFO] === Request start === [2025-08-22 14:17:06][350824191815231][2 ms][DEBUG] START check_scloud [2025-08-22 14:17:06][350824191815231][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:17:06][350824191815231][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 21620 4966 24813316 240212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:17:06][350824191815231][288 ms][DEBUG] targetPkg: running [2025-08-22 14:17:06][350824191815231][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-22 14:17:06][350824191815231][288 ms][DEBUG] START check_boot_completed [2025-08-22 14:17:06][350824191815231][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:17:06][350824191815231][320 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 14:17:06][350824191815231][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:17:06][350824191815231][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:17:06][350824191815231][367 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 14:17:06][350824191815231][367 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:17:06][350824191815231][367 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824191815231\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX71GRBGD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1787\"}'\'' -e'"" [2025-08-22 14:17:06][350824191815231][367 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:17:06][350824191815231][367 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824191815231\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX71GRBGD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1787\"}'\'' -e'"" [2025-08-22 14:17:07][350824191815231][1382 ms][DEBUG] proc_open done in 1015 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 14:17:07][350824191815231][1382 ms][DEBUG] END runCmdUntilRes#1 in 1015 ms [2025-08-22 14:17:07][350824191815231][1382 ms][WARN] Detected error: Process with pid 5385 either refused to load frida-agent, or terminated during injection [2025-08-22 14:17:07][350824191815231][1382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 14:17:07][350824191815231][1554 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 14:17:07][350824191815231][1554 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 14:17:07][350824191815231][1554 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:17:08][350824191815231][1820 ms][DEBUG] SU: done in 265 ms; out [2025-08-22 14:17:08][350824191815231][1820 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:17:08][350824191815231][2116 ms][DEBUG] SU: done in 297 ms; out [2025-08-22 14:17:10][350824191815231][4131 ms][DEBUG] START check_boot_completed [2025-08-22 14:17:10][350824191815231][4131 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:17:10][350824191815231][4178 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:17:10][350824191815231][4178 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:17:10][350824191815231][4241 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:17:10][350824191815231][4241 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 14:17:13][350824191815231][7256 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 14:17:13][350824191815231][7256 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824191815231\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX71GRBGD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1787\"}'\'' -e'"" [2025-08-22 14:17:15][350824191815231][8678 ms][DEBUG] proc_open done in 1422 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-22 14:17:15][350824191815231][8678 ms][DEBUG] END runCmdUntilRes#2 in 1423 ms [2025-08-22 14:17:15][350824191815231][8678 ms][WARN] Detected error 2; Reboot the device [2025-08-22 14:17:15][350824191815231][8678 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 14:17:15][350824191815231][9286 ms][DEBUG] SU: done in 608 ms; out [2025-08-22 14:17:27][350824191815231][0 ms][INFO] === Request start === [2025-08-22 14:17:27][350824191815231][1 ms][DEBUG] START check_scloud [2025-08-22 14:17:27][350824191815231][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:17:27][350824191815231][35 ms][DEBUG] SU: done in 34 ms; out [2025-08-22 14:17:27][350824191815231][35 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:17:27][350824191815231][35 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:17:27][350824191815231][66 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:17:27][350824191815231][66 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:17:27][350824191815231][97 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:17:29][350824191815231][2112 ms][DEBUG] END check_scloud in 2111 ms [2025-08-22 14:17:29][350824191815231][2112 ms][DEBUG] START check_boot_completed [2025-08-22 14:17:29][350824191815231][2113 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:18:07][352009441887010][1 ms][INFO] === Request start === [2025-08-22 14:18:07][352009441887010][1 ms][DEBUG] START check_scloud [2025-08-22 14:18:07][352009441887010][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:18:07][352009441887010][39 ms][DEBUG] SU: done in 37 ms; out [2025-08-22 14:18:07][352009441887010][39 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:18:07][352009441887010][39 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:18:07][352009441887010][85 ms][DEBUG] SU: done in 46 ms; out [2025-08-22 14:18:07][352009441887010][85 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:18:07][352009441887010][117 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:18:09][352009441887010][2132 ms][DEBUG] END check_scloud in 2130 ms [2025-08-22 14:18:09][352009441887010][2132 ms][DEBUG] START check_boot_completed [2025-08-22 14:18:09][352009441887010][2132 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:18:16][352009441887010][9273 ms][DEBUG] ADB: done in 7141 ms; out [2025-08-22 14:18:16][352009441887010][9273 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:18:16][352009441887010][9335 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:18:16][352009441887010][9335 ms][DEBUG] END check_boot_completed in 7204 ms [2025-08-22 14:18:16][352009441887010][9335 ms][DEBUG] START check_internet [2025-08-22 14:18:16][352009441887010][9335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:18:17][352009441887010][9461 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 14:18:17][352009441887010][9461 ms][WARN] check_internet: offline [2025-08-22 14:18:17][352009441887010][9461 ms][DEBUG] END check_internet in 125 ms [2025-08-22 14:18:18][352009441887010][0 ms][INFO] === Request start === [2025-08-22 14:18:18][352009441887010][1 ms][DEBUG] START check_scloud [2025-08-22 14:18:18][352009441887010][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:18:19][352009441887010][292 ms][DEBUG] SU: done in 291 ms; out [2025-08-22 14:18:19][352009441887010][293 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:18:19][352009441887010][293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:18:19][352009441887010][433 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 14:18:19][352009441887010][433 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:18:19][352009441887010][777 ms][DEBUG] SU: done in 344 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 14:18:19][350824191815231][0 ms][INFO] === Request start === [2025-08-22 14:18:19][350824191815231][1 ms][DEBUG] START check_scloud [2025-08-22 14:18:19][350824191815231][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:18:20][350824191815231][399 ms][DEBUG] SU: done in 398 ms; out [2025-08-22 14:18:20][350824191815231][399 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:18:20][350824191815231][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:18:20][350824191815231][430 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:18:20][350824191815231][430 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:18:20][350824191815231][461 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:18:21][352009441887010][2781 ms][DEBUG] END check_scloud in 2780 ms [2025-08-22 14:18:21][352009441887010][2781 ms][DEBUG] START check_boot_completed [2025-08-22 14:18:21][352009441887010][2781 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:18:21][352009441887010][2828 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:18:21][352009441887010][2828 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:18:21][352009441887010][2890 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:18:21][352009441887010][2891 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:18:21][352009441887010][2891 ms][DEBUG] START check_internet [2025-08-22 14:18:21][352009441887010][2891 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:18:21][352009441887010][3000 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 14:18:21][352009441887010][3000 ms][WARN] check_internet: offline [2025-08-22 14:18:21][352009441887010][3000 ms][DEBUG] END check_internet in 109 ms [2025-08-22 14:18:22][350824191815231][2466 ms][DEBUG] END check_scloud in 2465 ms [2025-08-22 14:18:22][350824191815231][2466 ms][DEBUG] START check_boot_completed [2025-08-22 14:18:22][350824191815231][2466 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:18:22][350824191815231][2513 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:18:22][350824191815231][2513 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:18:22][350824191815231][2560 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:18:22][350824191815231][2560 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:18:22][350824191815231][2560 ms][DEBUG] START check_internet [2025-08-22 14:18:22][350824191815231][2560 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:18:22][350824191815231][2670 ms][DEBUG] SU: done in 110 ms; out [2025-08-22 14:18:22][350824191815231][2670 ms][WARN] check_internet: offline [2025-08-22 14:18:22][350824191815231][2670 ms][DEBUG] END check_internet in 111 ms [2025-08-22 14:18:23][][0 ms][INFO] === Request start === [2025-08-22 14:18:23][][1 ms][DEBUG] START check_scloud [2025-08-22 14:18:23][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:18:24][][435 ms][DEBUG] SU: done in 434 ms; out [2025-08-22 14:18:24][][435 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:18:24][][435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:18:24][350824191815231][1 ms][INFO] === Request start === [2025-08-22 14:18:24][350824191815231][1 ms][DEBUG] START check_scloud [2025-08-22 14:18:24][350824191815231][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:18:24][][716 ms][DEBUG] SU: done in 281 ms; out [2025-08-22 14:18:24][][716 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:18:25][][1279 ms][DEBUG] SU: done in 562 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:18:25][350824191815231][1240 ms][DEBUG] SU: done in 547 ms; out [2025-08-22 14:18:25][350824191815231][1241 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:18:26][350824191815231][1850 ms][DEBUG] SU: done in 609 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 14:18:27][][3294 ms][DEBUG] END check_scloud in 3293 ms [2025-08-22 14:18:27][][3294 ms][DEBUG] START check_boot_completed [2025-08-22 14:18:27][][3294 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:18:27][][3341 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:18:27][][3341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:18:27][][3481 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 14:18:27][][3481 ms][DEBUG] END check_boot_completed in 188 ms [2025-08-22 14:18:27][][3481 ms][DEBUG] START check_internet [2025-08-22 14:18:27][][3481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:18:28][][4232 ms][DEBUG] SU: done in 751 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=191 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 191.807/191.807/191.807/0.000 ms\n [2025-08-22 14:18:28][][4233 ms][DEBUG] check_internet: online [2025-08-22 14:18:28][][4233 ms][DEBUG] END check_internet in 751 ms [2025-08-22 14:18:28][][4233 ms][DEBUG] rawBody.length=1131 [2025-08-22 14:18:28][][4233 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW904WM8L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6080\"}'\'' -e'"" [2025-08-22 14:18:28][][4233 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:18:28][][4233 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW904WM8L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6080\"}'\'' -e'"" [2025-08-22 14:18:28][350824191815231][3865 ms][DEBUG] END check_scloud in 3863 ms [2025-08-22 14:18:28][350824191815231][3865 ms][DEBUG] START check_boot_completed [2025-08-22 14:18:28][350824191815231][3865 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:18:28][350824191815231][3911 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:18:28][350824191815231][3912 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:18:28][350824191815231][3990 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 14:18:28][350824191815231][3990 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 14:18:28][350824191815231][3990 ms][DEBUG] START check_internet [2025-08-22 14:18:28][350824191815231][3990 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:18:28][350824191815231][4521 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.687/153.687/153.687/0.000 ms\n [2025-08-22 14:18:28][350824191815231][4521 ms][DEBUG] check_internet: online [2025-08-22 14:18:28][350824191815231][4521 ms][DEBUG] END check_internet in 531 ms [2025-08-22 14:18:28][350824191815231][4521 ms][DEBUG] rawBody.length=1160 [2025-08-22 14:18:28][350824191815231][4521 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824191815231\",\"model\":\"SM-A256E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX71GRBGD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7515\"}'\'' -e'"" [2025-08-22 14:18:28][350824191815231][4521 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:18:28][350824191815231][4522 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824191815231\",\"model\":\"SM-A256E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCX71GRBGD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7515\"}'\'' -e'"" [2025-08-22 14:18:32][350824191815231][8082 ms][DEBUG] proc_open done in 3561 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-22 14:18:32][350824191815231][8082 ms][DEBUG] END runCmdUntilRes#1 in 3561 ms [2025-08-22 14:18:32][350824191815231][8082 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5443 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5443 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-22 14:18:34][][0 ms][INFO] === Request start === [2025-08-22 14:18:37][][13229 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 14:18:37][][13385 ms][DEBUG] proc_open done in 9152 ms; code=255; res.len=107 [2025-08-22 14:18:37][][13385 ms][DEBUG] END runCmdUntilRes#1 in 9152 ms [2025-08-22 14:18:37][][13385 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 14:18:37][][0 ms][INFO] === Request start === [2025-08-22 14:18:37][][1 ms][DEBUG] START check_scloud [2025-08-22 14:18:37][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:18:37][][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 8038 5019 23571196 117720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:18:37][][328 ms][DEBUG] targetPkg: running [2025-08-22 14:18:37][][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-22 14:18:37][][328 ms][DEBUG] START check_boot_completed [2025-08-22 14:18:37][][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:18:37][][375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:18:37][][375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:18:37][][437 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:18:37][][437 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:18:37][][437 ms][DEBUG] START check_internet [2025-08-22 14:18:37][][437 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:18:38][][687 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.999/137.999/137.999/0.000 ms\n [2025-08-22 14:18:38][][688 ms][DEBUG] check_internet: online [2025-08-22 14:18:38][][688 ms][DEBUG] END check_internet in 250 ms [2025-08-22 14:18:38][][688 ms][DEBUG] rawBody.length=1131 [2025-08-22 14:18:38][][688 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW904WM8L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4879\"}'\'' -e'"" [2025-08-22 14:18:38][][688 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:18:38][][688 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW904WM8L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4879\"}'\'' -e'"" [2025-08-22 14:18:38][][1328 ms][DEBUG] proc_open done in 640 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-22 14:18:38][][1328 ms][DEBUG] END runCmdUntilRes#1 in 640 ms [2025-08-22 14:18:38][][1328 ms][WARN] Detected system_server; Reboot the device [2025-08-22 14:18:38][][1328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 14:18:40][][2828 ms][DEBUG] SU: done in 1499 ms; out [2025-08-22 14:18:51][][0 ms][INFO] === Request start === [2025-08-22 14:18:51][][1 ms][DEBUG] START check_scloud [2025-08-22 14:18:51][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:18:51][][49 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 14:18:51][][49 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:18:51][][49 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:18:51][][80 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:18:51][][81 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:18:51][][112 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:18:51][][0 ms][INFO] === Request start === [2025-08-22 14:18:53][][2127 ms][DEBUG] END check_scloud in 2126 ms [2025-08-22 14:18:53][][2127 ms][DEBUG] START check_boot_completed [2025-08-22 14:18:53][][2127 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:19:13][352009441887010][1 ms][INFO] === Request start === [2025-08-22 14:19:13][352009441887010][1 ms][DEBUG] START check_scloud [2025-08-22 14:19:13][352009441887010][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:19:13][352009441887010][43 ms][DEBUG] SU: done in 42 ms; out [2025-08-22 14:19:13][352009441887010][43 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:19:13][352009441887010][43 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:19:13][352009441887010][90 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:19:13][352009441887010][90 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:19:13][352009441887010][168 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 14:19:15][352009441887010][2183 ms][DEBUG] END check_scloud in 2182 ms [2025-08-22 14:19:15][352009441887010][2183 ms][DEBUG] START check_boot_completed [2025-08-22 14:19:15][352009441887010][2183 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:19:40][352009441887010][26594 ms][DEBUG] ADB: done in 24411 ms; out [2025-08-22 14:19:40][352009441887010][26594 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:19:40][352009441887010][26657 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 14:19:40][352009441887010][26657 ms][DEBUG] END check_boot_completed in 24474 ms [2025-08-22 14:19:40][352009441887010][26657 ms][DEBUG] rawBody.length=1160 [2025-08-22 14:19:40][352009441887010][26657 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009441887010\",\"model\":\"SM-A546B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCW904WM8L\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3036\"}'\'' -e'"" [2025-08-22 14:19:40][352009441887010][26657 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:19:40][352009441887010][26657 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009441887010\",\"model\":\"SM-A546B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCW904WM8L\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3036\"}'\'' -e'"" [2025-08-22 14:19:43][352009441887010][29500 ms][DEBUG] proc_open done in 2843 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 14:19:43][352009441887010][29500 ms][DEBUG] END runCmdUntilRes#1 in 2843 ms [2025-08-22 14:19:43][352009441887010][29500 ms][WARN] Detected error: Process not found [2025-08-22 14:19:43][352009441887010][29500 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 14:19:43][352009441887010][29656 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 14:19:43][352009441887010][29656 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 14:19:43][352009441887010][29656 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:19:43][352009441887010][29703 ms][DEBUG] SU: done in 46 ms; out [2025-08-22 14:19:43][352009441887010][29703 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:19:43][352009441887010][29734 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:19:45][352009441887010][31740 ms][DEBUG] START check_boot_completed [2025-08-22 14:19:45][352009441887010][31740 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:19:45][352009441887010][31787 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:19:45][352009441887010][31787 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:19:45][352009441887010][31850 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 14:19:45][352009441887010][31850 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 14:19:48][352009441887010][34864 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 14:19:48][352009441887010][34864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352009441887010\",\"model\":\"SM-A546B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RZCW904WM8L\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3036\"}'\'' -e'"" [2025-08-22 14:19:53][352009441887010][39504 ms][DEBUG] proc_open done in 4640 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 14:19:53][352009441887010][39504 ms][DEBUG] END runCmdUntilRes#2 in 4640 ms [2025-08-22 14:19:53][352009441887010][39504 ms][WARN] Detected error 2; Reboot the device [2025-08-22 14:19:53][352009441887010][39504 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 14:19:58][352009441887010][0 ms][INFO] === Request start === [2025-08-22 14:19:58][352009441887010][1 ms][DEBUG] START check_scloud [2025-08-22 14:19:58][352009441887010][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:19:59][352009441887010][38 ms][DEBUG] SU: done in 37 ms; out [2025-08-22 14:19:59][352009441887010][38 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:19:59][352009441887010][38 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:19:59][352009441887010][85 ms][DEBUG] SU: done in 46 ms; out [2025-08-22 14:19:59][352009441887010][85 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:19:59][352009441887010][116 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:20:01][352009441887010][2131 ms][DEBUG] END check_scloud in 2130 ms [2025-08-22 14:20:01][352009441887010][2131 ms][DEBUG] START check_boot_completed [2025-08-22 14:20:01][352009441887010][2131 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:21:03][350824191815231][0 ms][INFO] === Request start === [2025-08-22 14:21:03][350824191815231][1 ms][DEBUG] START check_scloud [2025-08-22 14:21:03][350824191815231][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:21:04][350824191815231][462 ms][DEBUG] SU: done in 461 ms; out [2025-08-22 14:21:04][350824191815231][462 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:21:04][350824191815231][462 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:21:04][350824191815231][666 ms][DEBUG] SU: done in 203 ms; out [2025-08-22 14:21:04][350824191815231][666 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:21:04][350824191815231][1087 ms][DEBUG] SU: done in 422 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 14:21:06][350824191815231][3102 ms][DEBUG] END check_scloud in 3101 ms [2025-08-22 14:21:06][350824191815231][3102 ms][DEBUG] START check_boot_completed [2025-08-22 14:21:06][350824191815231][3103 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:21:06][350824191815231][3149 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:21:06][350824191815231][3149 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:21:07][350824191815231][3337 ms][DEBUG] SU: done in 187 ms; out [2025-08-22 14:21:07][350824191815231][3337 ms][DEBUG] END check_boot_completed in 235 ms [2025-08-22 14:21:07][350824191815231][3337 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:21:07][350824191815231][3337 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824191815231\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX71GRBGD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9880\"}'\'' -e'"" [2025-08-22 14:21:07][350824191815231][3337 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:21:07][350824191815231][3337 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350824191815231\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX71GRBGD\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9880\"}'\'' -e'"" [2025-08-22 14:21:14][350824191815231][11100 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1b341c5d-ba57-4ec0-b1e0-ad1e63ef994a","id":"QR_1b341c5d-ba57-4ec0-b1e0-ad1e63ef994a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:21:14][350824191815231][11257 ms][DEBUG] proc_open done in 7919 ms; code=255; res.len=3152 [2025-08-22 14:21:14][350824191815231][11257 ms][DEBUG] END runCmdUntilRes#1 in 7920 ms [2025-08-22 14:21:14][350824191815231][11257 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:21:21][350272259809839][1 ms][INFO] === Request start === [2025-08-22 14:21:21][350272259809839][2 ms][DEBUG] START check_scloud [2025-08-22 14:21:21][350272259809839][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:21:21][350272259809839][375 ms][DEBUG] SU: done in 374 ms; outu0_a118 7823 4973 23981564 99832 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:21:21][350272259809839][375 ms][DEBUG] targetPkg: running [2025-08-22 14:21:21][350272259809839][375 ms][DEBUG] END check_scloud in 374 ms [2025-08-22 14:21:21][350272259809839][376 ms][DEBUG] START check_boot_completed [2025-08-22 14:21:21][350272259809839][376 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:21:21][350272259809839][422 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:21:21][350272259809839][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:21:21][350272259809839][484 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:21:21][350272259809839][485 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:21:21][350272259809839][485 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:21:21][350272259809839][485 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272259809839\",\"model\":\"SM-S908E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA1393MK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4952\"}'\'' -e'"" [2025-08-22 14:21:21][350272259809839][485 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:21:21][350272259809839][485 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350272259809839\",\"model\":\"SM-S908E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CTA1393MK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4952\"}'\'' -e'"" [2025-08-22 14:21:27][350272259809839][5764 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a74d59e-d02d-4fcf-b9dc-ec58d2d4c559","id":"QR_9a74d59e-d02d-4fcf-b9dc-ec58d2d4c559","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:21:27][350272259809839][5920 ms][DEBUG] proc_open done in 5435 ms; code=255; res.len=3152 [2025-08-22 14:21:27][350272259809839][5921 ms][DEBUG] END runCmdUntilRes#1 in 5436 ms [2025-08-22 14:21:27][350272259809839][5921 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:21:33][351726340346688][0 ms][INFO] === Request start === [2025-08-22 14:21:33][351726340346688][1 ms][DEBUG] START check_scloud [2025-08-22 14:21:33][351726340346688][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:21:34][351726340346688][348 ms][DEBUG] SU: done in 347 ms; outu0_a118 7823 4973 24155116 91912 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:21:34][351726340346688][349 ms][DEBUG] targetPkg: running [2025-08-22 14:21:34][351726340346688][349 ms][DEBUG] END check_scloud in 348 ms [2025-08-22 14:21:34][351726340346688][349 ms][DEBUG] START check_boot_completed [2025-08-22 14:21:34][351726340346688][349 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:21:34][351726340346688][395 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:21:34][351726340346688][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:21:34][351726340346688][442 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:21:34][351726340346688][442 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 14:21:34][351726340346688][442 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:21:34][351726340346688][442 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351726340346688\",\"model\":\"SM-F946N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW706NEEK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1990\"}'\'' -e'"" [2025-08-22 14:21:34][351726340346688][442 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:21:34][351726340346688][442 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351726340346688\",\"model\":\"SM-F946N\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CW706NEEK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"KOO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1990\"}'\'' -e'"" [2025-08-22 14:21:38][351726340346688][4707 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_594eeff2-9102-4f85-ba0b-13cea0c4ef6b","id":"QR_594eeff2-9102-4f85-ba0b-13cea0c4ef6b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:21:38][351726340346688][4863 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3152 [2025-08-22 14:21:38][351726340346688][4863 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-22 14:21:38][351726340346688][4863 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:22:05][350938287109497][0 ms][INFO] === Request start === [2025-08-22 14:22:05][350938287109497][1 ms][DEBUG] START check_scloud [2025-08-22 14:22:05][350938287109497][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:22:06][350938287109497][352 ms][DEBUG] SU: done in 351 ms; outu0_a118 7823 4973 24180540 67804 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:22:06][350938287109497][352 ms][DEBUG] targetPkg: running [2025-08-22 14:22:06][350938287109497][352 ms][DEBUG] END check_scloud in 351 ms [2025-08-22 14:22:06][350938287109497][352 ms][DEBUG] START check_boot_completed [2025-08-22 14:22:06][350938287109497][352 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:22:06][350938287109497][399 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:22:06][350938287109497][399 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:22:06][350938287109497][445 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:22:06][350938287109497][445 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 14:22:06][350938287109497][445 ms][DEBUG] START check_internet [2025-08-22 14:22:06][350938287109497][445 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:22:06][350938287109497][883 ms][DEBUG] SU: done in 438 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.653/202.653/202.653/0.000 ms\n [2025-08-22 14:22:06][350938287109497][883 ms][DEBUG] check_internet: online [2025-08-22 14:22:06][350938287109497][883 ms][DEBUG] END check_internet in 438 ms [2025-08-22 14:22:06][350938287109497][883 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:22:06][350938287109497][883 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287109497\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y202F09H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-08-22 14:22:06][350938287109497][883 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:22:06][350938287109497][884 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287109497\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y202F09H\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7527\"}'\'' -e'"" [2025-08-22 14:22:11][350938287109497][5710 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_089d13e9-5eee-4e55-b790-c82bcc4a4641","id":"QR_089d13e9-5eee-4e55-b790-c82bcc4a4641","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:22:11][350938287109497][5866 ms][DEBUG] proc_open done in 4982 ms; code=255; res.len=3152 [2025-08-22 14:22:11][350938287109497][5866 ms][DEBUG] END runCmdUntilRes#1 in 4982 ms [2025-08-22 14:22:11][350938287109497][5866 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:23:07][357967975319327][0 ms][INFO] === Request start === [2025-08-22 14:23:07][357967975319327][1 ms][DEBUG] START check_scloud [2025-08-22 14:23:07][357967975319327][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:23:08][357967975319327][348 ms][DEBUG] SU: done in 347 ms; outu0_a118 7823 4973 24295316 84376 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:23:08][357967975319327][348 ms][DEBUG] targetPkg: running [2025-08-22 14:23:08][357967975319327][348 ms][DEBUG] END check_scloud in 347 ms [2025-08-22 14:23:08][357967975319327][348 ms][DEBUG] START check_boot_completed [2025-08-22 14:23:08][357967975319327][349 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:23:08][357967975319327][395 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:23:08][357967975319327][395 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:23:08][357967975319327][458 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:23:08][357967975319327][458 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:23:08][357967975319327][458 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:23:08][357967975319327][458 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975319327\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y20C3Z7W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1292\"}'\'' -e'"" [2025-08-22 14:23:08][357967975319327][458 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:23:08][357967975319327][458 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967975319327\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y20C3Z7W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1292\"}'\'' -e'"" [2025-08-22 14:23:13][357967975319327][5456 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fd5a3766-3a33-4e75-b236-f4527750421b","id":"QR_fd5a3766-3a33-4e75-b236-f4527750421b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:23:13][357967975319327][5612 ms][DEBUG] proc_open done in 5154 ms; code=255; res.len=3152 [2025-08-22 14:23:13][357967975319327][5612 ms][DEBUG] END runCmdUntilRes#1 in 5155 ms [2025-08-22 14:23:13][357967975319327][5612 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:24:07][351786693422486][1 ms][INFO] === Request start === [2025-08-22 14:24:07][351786693422486][2 ms][DEBUG] START check_scloud [2025-08-22 14:24:07][351786693422486][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:24:07][351786693422486][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 7823 4973 24401016 88436 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:24:07][351786693422486][284 ms][DEBUG] targetPkg: running [2025-08-22 14:24:07][351786693422486][284 ms][DEBUG] END check_scloud in 282 ms [2025-08-22 14:24:07][351786693422486][284 ms][DEBUG] START check_boot_completed [2025-08-22 14:24:07][351786693422486][284 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:24:07][351786693422486][330 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:24:07][351786693422486][330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:24:07][351786693422486][377 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:24:07][351786693422486][378 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:24:07][351786693422486][378 ms][DEBUG] START check_internet [2025-08-22 14:24:07][351786693422486][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:24:08][351786693422486][752 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.108/244.108/244.108/0.000 ms\n [2025-08-22 14:24:08][351786693422486][752 ms][DEBUG] check_internet: online [2025-08-22 14:24:08][351786693422486][752 ms][DEBUG] END check_internet in 375 ms [2025-08-22 14:24:08][351786693422486][752 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:24:08][351786693422486][753 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693422486\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10NGAXA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5205\"}'\'' -e'"" [2025-08-22 14:24:08][351786693422486][753 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:24:08][351786693422486][753 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351786693422486\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W10NGAXA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5205\"}'\'' -e'"" [2025-08-22 14:24:12][351786693422486][4845 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e242dea6-377a-4b1e-b16e-c6754266a844","id":"QR_e242dea6-377a-4b1e-b16e-c6754266a844","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:24:12][351786693422486][5001 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 14:24:12][351786693422486][5001 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-22 14:24:12][351786693422486][5001 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:24:21][351270416448128][0 ms][INFO] === Request start === [2025-08-22 14:24:21][351270416448128][1 ms][DEBUG] START check_scloud [2025-08-22 14:24:21][351270416448128][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:24:21][351270416448128][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 7823 4973 24533376 101468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:24:21][351270416448128][312 ms][DEBUG] targetPkg: running [2025-08-22 14:24:21][351270416448128][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 14:24:21][351270416448128][312 ms][DEBUG] START check_boot_completed [2025-08-22 14:24:21][351270416448128][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:24:21][351270416448128][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:24:21][351270416448128][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:24:21][351270416448128][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:24:21][351270416448128][422 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:24:21][351270416448128][422 ms][DEBUG] START check_internet [2025-08-22 14:24:21][351270416448128][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 14:24:22][351270416448128][796 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=230 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 230.473/230.473/230.473/0.000 ms\n [2025-08-22 14:24:22][351270416448128][797 ms][DEBUG] check_internet: online [2025-08-22 14:24:22][351270416448128][797 ms][DEBUG] END check_internet in 375 ms [2025-08-22 14:24:22][351270416448128][797 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:24:22][351270416448128][797 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270416448128\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T701TV3L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2154\"}'\'' -e'"" [2025-08-22 14:24:22][351270416448128][797 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:24:22][351270416448128][797 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351270416448128\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T701TV3L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2154\"}'\'' -e'"" [2025-08-22 14:24:26][351270416448128][4889 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0178d63f-4334-4d3a-ae81-93e337473727","id":"QR_0178d63f-4334-4d3a-ae81-93e337473727","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:24:26][351270416448128][5045 ms][DEBUG] proc_open done in 4248 ms; code=255; res.len=3152 [2025-08-22 14:24:26][351270416448128][5045 ms][DEBUG] END runCmdUntilRes#1 in 4248 ms [2025-08-22 14:24:26][351270416448128][5045 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:25:10][357651719838210][0 ms][INFO] === Request start === [2025-08-22 14:25:10][357651719838210][1 ms][DEBUG] START check_scloud [2025-08-22 14:25:10][357651719838210][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:25:10][356769545745218][0 ms][INFO] === Request start === [2025-08-22 14:25:10][357651719838210][317 ms][DEBUG] SU: done in 316 ms; outu0_a118 7823 4973 24620608 114500 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:25:10][357651719838210][317 ms][DEBUG] targetPkg: running [2025-08-22 14:25:10][357651719838210][317 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 14:25:10][357651719838210][317 ms][DEBUG] START check_boot_completed [2025-08-22 14:25:10][357651719838210][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:25:10][357651719838210][348 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 14:25:10][357651719838210][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:25:10][357651719838210][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:25:10][357651719838210][395 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 14:25:10][357651719838210][395 ms][DEBUG] rawBody.length=1160 [2025-08-22 14:25:10][357651719838210][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651719838210\",\"model\":\"SM-A135M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8TA05P3XD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8850\"}'\'' -e'"" [2025-08-22 14:25:10][357651719838210][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:25:10][357651719838210][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651719838210\",\"model\":\"SM-A135M\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8TA05P3XD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8850\"}'\'' -e'"" [2025-08-22 14:25:15][357651719838210][5706 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d1114a96-b80f-4d30-bdc3-3d1f5ecf0f63","id":"QR_d1114a96-b80f-4d30-bdc3-3d1f5ecf0f63","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:25:15][357651719838210][5862 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3152 [2025-08-22 14:25:15][357651719838210][5862 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-22 14:25:15][357651719838210][5862 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:25:16][356769545745218][6080 ms][DEBUG] START check_scloud [2025-08-22 14:25:16][356769545745218][6080 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:25:16][356769545745218][6392 ms][DEBUG] SU: done in 312 ms; outu0_a118 7823 4973 24785672 125700 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:25:16][356769545745218][6392 ms][DEBUG] targetPkg: running [2025-08-22 14:25:16][356769545745218][6392 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 14:25:16][356769545745218][6392 ms][DEBUG] START check_boot_completed [2025-08-22 14:25:16][356769545745218][6392 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:25:16][356769545745218][6424 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 14:25:16][356769545745218][6424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:25:16][356769545745218][6470 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:25:16][356769545745218][6470 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 14:25:16][356769545745218][6470 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:25:16][356769545745218][6470 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545745218\",\"model\":\"SM-A047F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W50410HH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7489\"}'\'' -e'"" [2025-08-22 14:25:16][356769545745218][6470 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:25:16][356769545745218][6470 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356769545745218\",\"model\":\"SM-A047F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8W50410HH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7489\"}'\'' -e'"" [2025-08-22 14:25:20][356769545745218][10188 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f8d868d1-fb83-402d-a510-e7d8fdaa4fc1","id":"QR_f8d868d1-fb83-402d-a510-e7d8fdaa4fc1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:25:20][356769545745218][10344 ms][DEBUG] proc_open done in 3874 ms; code=255; res.len=3152 [2025-08-22 14:25:20][356769545745218][10345 ms][DEBUG] END runCmdUntilRes#1 in 3874 ms [2025-08-22 14:25:20][356769545745218][10345 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:25:22][353409201800071][0 ms][INFO] === Request start === [2025-08-22 14:25:22][353409201800071][1 ms][DEBUG] START check_scloud [2025-08-22 14:25:22][353409201800071][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:25:22][353409201800071][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 7823 4973 24967056 136608 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:25:22][353409201800071][318 ms][DEBUG] targetPkg: running [2025-08-22 14:25:22][353409201800071][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 14:25:22][353409201800071][318 ms][DEBUG] START check_boot_completed [2025-08-22 14:25:22][353409201800071][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:25:22][353409201800071][365 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:25:22][353409201800071][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:25:22][353409201800071][428 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 14:25:22][353409201800071][428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:25:22][353409201800071][428 ms][DEBUG] rawBody.length=1160 [2025-08-22 14:25:22][353409201800071][428 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353409201800071\",\"model\":\"SM-S901U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT61L0YCZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4131\"}'\'' -e'"" [2025-08-22 14:25:22][353409201800071][428 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:25:22][353409201800071][428 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353409201800071\",\"model\":\"SM-S901U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT61L0YCZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4131\"}'\'' -e'"" [2025-08-22 14:25:28][353409201800071][6645 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8759942e-29d8-4703-9b57-02c546a592d0","id":"QR_8759942e-29d8-4703-9b57-02c546a592d0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:25:28][353409201800071][6801 ms][DEBUG] proc_open done in 6373 ms; code=255; res.len=3152 [2025-08-22 14:25:28][353409201800071][6801 ms][DEBUG] END runCmdUntilRes#1 in 6373 ms [2025-08-22 14:25:28][353409201800071][6801 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:25:34][354285671317476][0 ms][INFO] === Request start === [2025-08-22 14:25:34][354285671317476][1 ms][DEBUG] START check_scloud [2025-08-22 14:25:34][354285671317476][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:25:34][354285671317476][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 7823 4973 25082932 147348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:25:34][354285671317476][304 ms][DEBUG] targetPkg: running [2025-08-22 14:25:34][354285671317476][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 14:25:34][354285671317476][304 ms][DEBUG] START check_boot_completed [2025-08-22 14:25:34][354285671317476][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:25:34][354285671317476][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 14:25:34][354285671317476][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:25:34][354285671317476][398 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 14:25:34][354285671317476][399 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 14:25:34][354285671317476][399 ms][DEBUG] rawBody.length=1160 [2025-08-22 14:25:34][354285671317476][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354285671317476\",\"model\":\"SM-S901U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCTC0HKA3D\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1240\"}'\'' -e'"" [2025-08-22 14:25:34][354285671317476][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:25:34][354285671317476][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354285671317476\",\"model\":\"SM-S901U\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCTC0HKA3D\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1240\"}'\'' -e'"" [2025-08-22 14:25:40][354285671317476][6318 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_89e65a66-4b8e-4eb6-a099-f6953e250aa4","id":"QR_89e65a66-4b8e-4eb6-a099-f6953e250aa4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:25:40][354285671317476][6474 ms][DEBUG] proc_open done in 6075 ms; code=255; res.len=3152 [2025-08-22 14:25:40][354285671317476][6474 ms][DEBUG] END runCmdUntilRes#1 in 6075 ms [2025-08-22 14:25:40][354285671317476][6474 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:25:49][353497473331586][0 ms][INFO] === Request start === [2025-08-22 14:25:49][353497473331586][1 ms][DEBUG] START check_scloud [2025-08-22 14:25:49][353497473331586][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:25:49][353497473331586][261 ms][DEBUG] SU: done in 259 ms; outu0_a118 7823 4973 25194740 158616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:25:49][353497473331586][261 ms][DEBUG] targetPkg: running [2025-08-22 14:25:49][353497473331586][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-22 14:25:49][353497473331586][261 ms][DEBUG] START check_boot_completed [2025-08-22 14:25:49][353497473331586][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:25:49][353497473331586][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:25:49][353497473331586][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:25:49][353497473331586][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:25:49][353497473331586][354 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 14:25:49][353497473331586][354 ms][DEBUG] rawBody.length=1160 [2025-08-22 14:25:49][353497473331586][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497473331586\",\"model\":\"SM-S921B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX80JTHEM\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9596\"}'\'' -e'"" [2025-08-22 14:25:49][353497473331586][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:25:49][353497473331586][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497473331586\",\"model\":\"SM-S921B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX80JTHEM\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9596\"}'\'' -e'"" [2025-08-22 14:25:58][353497473331586][9586 ms][DEBUG] proc_open done in 9232 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 14:25:58][353497473331586][9587 ms][DEBUG] END runCmdUntilRes#1 in 9232 ms [2025-08-22 14:25:58][353497473331586][9587 ms][WARN] Detected error: Process with pid 7823 either refused to load frida-agent, or terminated during injection [2025-08-22 14:25:58][353497473331586][9587 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 14:25:59][353497473331586][9774 ms][DEBUG] SU: done in 187 ms; out [2025-08-22 14:25:59][353497473331586][9774 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 14:25:59][353497473331586][9774 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:25:59][353497473331586][9946 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 14:25:59][353497473331586][9946 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:25:59][353497473331586][10227 ms][DEBUG] SU: done in 281 ms; out [2025-08-22 14:26:00][352467921169269][0 ms][INFO] === Request start === [2025-08-22 14:26:01][353497473331586][12242 ms][DEBUG] START check_boot_completed [2025-08-22 14:26:01][353497473331586][12242 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:26:01][353497473331586][12289 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:26:01][353497473331586][12289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:26:01][353497473331586][12336 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:26:01][353497473331586][12336 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:26:04][353497473331586][15351 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 14:26:04][353497473331586][15351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353497473331586\",\"model\":\"SM-S921B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX80JTHEM\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9596\"}'\'' -e'"" [2025-08-22 14:26:06][353497473331586][16819 ms][DEBUG] proc_open done in 1468 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-22 14:26:06][353497473331586][16819 ms][DEBUG] END runCmdUntilRes#2 in 1468 ms [2025-08-22 14:26:06][353497473331586][16819 ms][WARN] Detected error 2; Reboot the device [2025-08-22 14:26:06][353497473331586][16819 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 14:26:06][353497473331586][17413 ms][DEBUG] SU: done in 594 ms; out [2025-08-22 14:26:09][355731673219193][1 ms][INFO] === Request start === [2025-08-22 14:26:10][352600224237769][1 ms][INFO] === Request start === [2025-08-22 14:26:16][355731673219193][7103 ms][DEBUG] START check_scloud [2025-08-22 14:26:16][355731673219193][7103 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:26:16][355731673219193][7150 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:26:16][355731673219193][7150 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:26:16][355731673219193][7150 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:26:16][355731673219193][7212 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:26:16][355731673219193][7213 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:26:16][355731673219193][7259 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:26:17][352467921169269][0 ms][INFO] === Request start === [2025-08-22 14:26:17][352467921169269][1 ms][DEBUG] START check_scloud [2025-08-22 14:26:17][352467921169269][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:26:17][352467921169269][30 ms][DEBUG] SU: done in 29 ms; out [2025-08-22 14:26:17][352467921169269][30 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:26:17][352467921169269][30 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:26:17][352467921169269][61 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:26:17][352467921169269][61 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:26:17][352467921169269][92 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:26:18][353497473331586][1 ms][INFO] === Request start === [2025-08-22 14:26:18][355731673219193][9274 ms][DEBUG] END check_scloud in 2171 ms [2025-08-22 14:26:18][355731673219193][9274 ms][DEBUG] START check_boot_completed [2025-08-22 14:26:18][355731673219193][9274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:26:19][352467921169269][2107 ms][DEBUG] END check_scloud in 2106 ms [2025-08-22 14:26:19][352467921169269][2107 ms][DEBUG] START check_boot_completed [2025-08-22 14:26:19][352467921169269][2107 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:26:22][353029498911223][1 ms][INFO] === Request start === [2025-08-22 14:26:27][352600224237769][0 ms][INFO] === Request start === [2025-08-22 14:26:38][353029498911223][0 ms][INFO] === Request start === [2025-08-22 14:26:39][353497473331586][0 ms][INFO] === Request start === [2025-08-22 14:26:47][350938285822968][0 ms][INFO] === Request start === [2025-08-22 14:26:49][352600224237769][1 ms][INFO] === Request start === [2025-08-22 14:26:56][353497473331586][0 ms][INFO] === Request start === [2025-08-22 14:27:00][353029498911223][0 ms][INFO] === Request start === [2025-08-22 14:27:01][358230104082095][1 ms][INFO] === Request start === [2025-08-22 14:27:01][355731673219193][1 ms][INFO] === Request start === [2025-08-22 14:27:04][350938285822968][0 ms][INFO] === Request start === [2025-08-22 14:27:06][352600224237769][0 ms][INFO] === Request start === [2025-08-22 14:27:06][352600224237769][0 ms][DEBUG] START check_scloud [2025-08-22 14:27:06][352600224237769][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:27:06][352600224237769][368 ms][DEBUG] SU: done in 368 ms; out [2025-08-22 14:27:06][352600224237769][368 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:27:06][352600224237769][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:27:06][353029498911223][6081 ms][DEBUG] START check_scloud [2025-08-22 14:27:06][353029498911223][6081 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:27:06][352600224237769][493 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 14:27:06][352600224237769][493 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:27:07][352600224237769][837 ms][DEBUG] SU: done in 344 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 14:27:07][353029498911223][6441 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:27:07][353029498911223][6441 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:27:07][353029498911223][6660 ms][DEBUG] SU: done in 219 ms; out [2025-08-22 14:27:07][353029498911223][6660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:27:07][353029498911223][6972 ms][DEBUG] SU: done in 312 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 14:27:09][352600224237769][2852 ms][DEBUG] END check_scloud in 2852 ms [2025-08-22 14:27:09][352600224237769][2852 ms][DEBUG] START check_boot_completed [2025-08-22 14:27:09][352600224237769][2852 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:27:09][352600224237769][2899 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:27:09][352600224237769][2899 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:27:09][352600224237769][2961 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 14:27:09][352600224237769][2962 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 14:27:09][352600224237769][2962 ms][DEBUG] rawBody.length=1150 [2025-08-22 14:27:09][352600224237769][2962 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224237769\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8707\"}'\'' -e'"" [2025-08-22 14:27:09][352600224237769][2962 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:27:09][352600224237769][2962 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600224237769\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8707\"}'\'' -e'"" [2025-08-22 14:27:09][353029498911223][8987 ms][DEBUG] END check_scloud in 2906 ms [2025-08-22 14:27:09][353029498911223][8987 ms][DEBUG] START check_boot_completed [2025-08-22 14:27:09][353029498911223][8987 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:27:09][353029498911223][9034 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:27:09][353029498911223][9034 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:27:09][353029498911223][9081 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 14:27:09][353029498911223][9081 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:27:09][353029498911223][9081 ms][DEBUG] rawBody.length=1150 [2025-08-22 14:27:09][353029498911223][9081 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029498911223\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6787\"}'\'' -e'"" [2025-08-22 14:27:09][353029498911223][9081 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:27:09][353029498911223][9081 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353029498911223\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6787\"}'\'' -e'"" [2025-08-22 14:27:10][352600224237769][4477 ms][DEBUG] proc_open done in 1515 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-22 14:27:10][352600224237769][4477 ms][DEBUG] END runCmdUntilRes#1 in 1515 ms [2025-08-22 14:27:10][352600224237769][4477 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5394 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5394 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-22 14:27:11][350938285822968][7098 ms][DEBUG] START check_scloud [2025-08-22 14:27:11][350938285822968][7098 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:27:11][350938285822968][7129 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:27:11][350938285822968][7129 ms][WARN] targetPkg: not running, restarting [2025-08-22 14:27:11][350938285822968][7129 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:27:11][350938285822968][7160 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:27:11][350938285822968][7160 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:27:11][350938285822968][7191 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 14:27:12][][0 ms][INFO] === Request start === [2025-08-22 14:27:13][350938285822968][9205 ms][DEBUG] END check_scloud in 2107 ms [2025-08-22 14:27:13][350938285822968][9205 ms][DEBUG] START check_boot_completed [2025-08-22 14:27:13][350938285822968][9205 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:27:13][350938285822968][9236 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 14:27:13][350938285822968][9236 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:27:13][350938285822968][9298 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:27:13][350938285822968][9299 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:27:13][350938285822968][9299 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:27:13][350938285822968][9299 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938285822968\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y10QCR7N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9681\"}'\'' -e'"" [2025-08-22 14:27:13][350938285822968][9299 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:27:13][350938285822968][9299 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938285822968\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y10QCR7N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9681\"}'\'' -e'"" [2025-08-22 14:27:15][350938285822968][11407 ms][DEBUG] proc_open done in 2109 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 14:27:15][350938285822968][11407 ms][DEBUG] END runCmdUntilRes#1 in 2109 ms [2025-08-22 14:27:15][350938285822968][11407 ms][WARN] Detected error: Process not found [2025-08-22 14:27:15][350938285822968][11407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 14:27:15][350938285822968][11548 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 14:27:15][350938285822968][11548 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 14:27:15][350938285822968][11548 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 14:27:15][350938285822968][11751 ms][DEBUG] SU: done in 203 ms; out [2025-08-22 14:27:15][350938285822968][11751 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 14:27:16][350938285822968][12173 ms][DEBUG] SU: done in 422 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 14:27:16][][0 ms][INFO] === Request start === [2025-08-22 14:27:17][358230104082095][0 ms][INFO] === Request start === [2025-08-22 14:27:18][350938285822968][14188 ms][DEBUG] START check_boot_completed [2025-08-22 14:27:18][350938285822968][14188 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:27:18][350938285822968][14219 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 14:27:18][350938285822968][14219 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:27:18][350938285822968][14282 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:27:18][350938285822968][14282 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:27:21][][0 ms][INFO] === Request start === [2025-08-22 14:27:21][350938285822968][17297 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 14:27:21][350938285822968][17297 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938285822968\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y10QCR7N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9681\"}'\'' -e'"" [2025-08-22 14:27:21][353029498911223][21085 ms][DEBUG] proc_open done in 12004 ms (timeout); code=0; out.len=0 err.len=11 [2025-08-22 14:27:21][353029498911223][21085 ms][DEBUG] END runCmdUntilRes#1 in 12005 ms [2025-08-22 14:27:21][353029498911223][21085 ms][ERROR] NO RESULT; code=124 out errtimeout 12s [2025-08-22 14:27:22][][1003 ms][DEBUG] START check_scloud [2025-08-22 14:27:22][][1003 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:27:22][][1784 ms][DEBUG] SU: done in 781 ms; outu0_a118 7698 4975 23490652 120576 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:27:22][][1784 ms][DEBUG] targetPkg: running [2025-08-22 14:27:22][][1784 ms][DEBUG] END check_scloud in 781 ms [2025-08-22 14:27:22][][1784 ms][DEBUG] START check_boot_completed [2025-08-22 14:27:22][][1784 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:27:22][][1815 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 14:27:22][][1815 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:27:23][352060483120000][0 ms][INFO] === Request start === [2025-08-22 14:27:23][][1893 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 14:27:23][][1893 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 14:27:23][][1893 ms][DEBUG] rawBody.length=1130 [2025-08-22 14:27:23][][1893 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX20XF6TP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6462\"}'\'' -e'"" [2025-08-22 14:27:23][][1893 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:27:23][][1894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S928B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX20XF6TP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6462\"}'\'' -e'"" [2025-08-22 14:27:23][353029498911223][0 ms][INFO] === Request start === [2025-08-22 14:27:24][][3348 ms][DEBUG] proc_open done in 1454 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-22 14:27:24][][3348 ms][DEBUG] END runCmdUntilRes#1 in 1455 ms [2025-08-22 14:27:24][][3348 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5394 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5394 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-22 14:27:24][][8113 ms][DEBUG] START check_scloud [2025-08-22 14:27:24][][8113 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:27:25][][8597 ms][DEBUG] SU: done in 484 ms; outu0_a118 7698 4975 23508088 117760 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:27:25][][8597 ms][DEBUG] targetPkg: running [2025-08-22 14:27:25][][8598 ms][DEBUG] END check_scloud in 485 ms [2025-08-22 14:27:25][][8598 ms][DEBUG] START check_boot_completed [2025-08-22 14:27:25][][8598 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:27:25][][8644 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:27:25][][8644 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:27:25][][8707 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:27:25][][8707 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:27:25][][8707 ms][DEBUG] rawBody.length=1130 [2025-08-22 14:27:25][][8707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX80JTHEM\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7343\"}'\'' -e'"" [2025-08-22 14:27:25][][8707 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:27:25][][8707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX80JTHEM\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7343\"}'\'' -e'"" [2025-08-22 14:27:26][][0 ms][INFO] === Request start === [2025-08-22 14:27:26][][10098 ms][DEBUG] proc_open done in 1391 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-22 14:27:26][][10098 ms][DEBUG] END runCmdUntilRes#1 in 1391 ms [2025-08-22 14:27:26][][10098 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5394 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5394 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-22 14:27:27][][14205 ms][DEBUG] START check_scloud [2025-08-22 14:27:27][][14205 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:27:27][][14815 ms][DEBUG] SU: done in 609 ms; outu0_a118 7698 4975 23598404 102200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:27:27][][14815 ms][DEBUG] targetPkg: running [2025-08-22 14:27:27][][14815 ms][DEBUG] END check_scloud in 609 ms [2025-08-22 14:27:27][][14815 ms][DEBUG] START check_boot_completed [2025-08-22 14:27:27][][14815 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:27:27][][14846 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 14:27:27][][14846 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:27:27][][14908 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 14:27:27][][14909 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 14:27:27][][14909 ms][DEBUG] rawBody.length=1131 [2025-08-22 14:27:27][][14909 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y50GYJ6Z\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6177\"}'\'' -e'"" [2025-08-22 14:27:27][][14909 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:27:27][][14909 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y50GYJ6Z\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6177\"}'\'' -e'"" [2025-08-22 14:27:28][][0 ms][INFO] === Request start === [2025-08-22 14:27:30][350938285822968][26388 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fc79e977-2d3e-4273-bf0b-3e6fd4c8030c","id":"QR_fc79e977-2d3e-4273-bf0b-3e6fd4c8030c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 14:27:30][350938285822968][26544 ms][DEBUG] proc_open done in 9248 ms; code=255; res.len=3152 [2025-08-22 14:27:30][350938285822968][26545 ms][DEBUG] END runCmdUntilRes#2 in 9248 ms [2025-08-22 14:27:30][350938285822968][26545 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 14:27:30][][2031 ms][DEBUG] START check_scloud [2025-08-22 14:27:30][][2032 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:27:30][][2344 ms][DEBUG] SU: done in 312 ms; outu0_a118 7698 4975 23836320 115416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:27:30][][2344 ms][DEBUG] targetPkg: running [2025-08-22 14:27:30][][2344 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 14:27:30][][2344 ms][DEBUG] START check_boot_completed [2025-08-22 14:27:30][][2344 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:27:30][][2391 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:27:30][][2391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:27:31][][2439 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 14:27:31][][2439 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 14:27:31][][2439 ms][DEBUG] rawBody.length=1130 [2025-08-22 14:27:31][][2439 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX80JTHEM\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7343\"}'\'' -e'"" [2025-08-22 14:27:31][][2439 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:27:31][][2440 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S921B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCX80JTHEM\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7343\"}'\'' -e'"" [2025-08-22 14:27:32][][19204 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 14:27:32][][19360 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=107 [2025-08-22 14:27:32][][19360 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-22 14:27:32][][19360 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 14:27:32][352060483120000][9139 ms][DEBUG] START check_scloud [2025-08-22 14:27:32][352060483120000][9139 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 14:27:32][352060483120000][9483 ms][DEBUG] SU: done in 344 ms; outu0_a118 7698 4975 23836320 114852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 14:27:32][352060483120000][9483 ms][DEBUG] targetPkg: running [2025-08-22 14:27:32][352060483120000][9483 ms][DEBUG] END check_scloud in 344 ms [2025-08-22 14:27:32][352060483120000][9483 ms][DEBUG] START check_boot_completed [2025-08-22 14:27:32][352060483120000][9484 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 14:27:32][352060483120000][9530 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 14:27:32][352060483120000][9530 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 14:27:32][352060483120000][9593 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 14:27:32][352060483120000][9593 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 14:27:32][352060483120000][9593 ms][DEBUG] rawBody.length=1161 [2025-08-22 14:27:32][352060483120000][9593 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483120000\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X30AK45V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4230\"}'\'' -e'"" [2025-08-22 14:27:32][352060483120000][9593 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 14:27:32][352060483120000][9593 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483120000\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X30AK45V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4230\"}'\'' -e'"" [2025-08-22 14:27:41][357967971009757][0 ms][INFO] === Request start === [2025-08-22 14:27:42][358230104082095][0 ms][INFO] === Request start === [2025-08-22 14:27:46][][0 ms][INFO] === Request start === [2025-08-22 14:27:48][][0 ms][INFO] === Request start === [2025-08-22 14:28:00][357967971009757][0 ms][INFO] === Request start === [2025-08-22 14:28:02][358230104082095][0 ms][INFO] === Request start === [2025-08-22 14:28:06][][0 ms][INFO] === Request start === [2025-08-22 14:28:08][][0 ms][INFO] === Request start === [2025-08-22 14:28:17][352060483120000][0 ms][INFO] === Request start === [2025-08-22 14:28:21][350281372873002][0 ms][INFO] === Request start === [2025-08-22 14:28:23][][1 ms][INFO] === Request start === [2025-08-22 14:28:24][][1 ms][INFO] === Request start === [2025-08-22 14:28:31][357435847862643][1 ms][INFO] === Request start === [2025-08-22 14:28:36][350103378757353][0 ms][INFO] === Request start === [2025-08-22 14:28:39][][0 ms][INFO] === Request start === [2025-08-22 14:28:40][350281372873002][0 ms][INFO] === Request start === [2025-08-22 14:28:43][][1 ms][INFO] === Request start === [2025-08-22 14:28:44][][1 ms][INFO] === Request start === [2025-08-22 14:28:51][353255360722071][0 ms][INFO] === Request start === [2025-08-22 14:28:51][357435847862643][1 ms][INFO] === Request start === [2025-08-22 14:28:56][350103378757353][0 ms][INFO] === Request start === [2025-08-22 14:28:59][][0 ms][INFO] === Request start === [2025-08-22 14:29:05][350281372873002][0 ms][INFO] === Request start === [2025-08-22 14:29:05][][1 ms][INFO] === Request start === [2025-08-22 14:29:10][353255360722071][0 ms][INFO] === Request start === [2025-08-22 14:29:14][351272339045692][0 ms][INFO] === Request start === [2025-08-22 14:29:16][357435847862643][0 ms][INFO] === Request start === [2025-08-22 14:29:21][350103378757353][0 ms][INFO] === Request start === [2025-08-22 14:29:22][][0 ms][INFO] === Request start === [2025-08-22 14:29:25][350281372873002][0 ms][INFO] === Request start === [2025-08-22 14:29:25][][1 ms][INFO] === Request start === [2025-08-22 14:29:33][351272339045692][0 ms][INFO] === Request start === [2025-08-22 14:29:35][353255360722071][0 ms][INFO] === Request start === [2025-08-22 14:29:36][357435847862643][0 ms][INFO] === Request start === [2025-08-22 14:29:40][350103378757353][0 ms][INFO] === Request start === [2025-08-22 14:29:41][][0 ms][INFO] === Request start === [2025-08-22 14:29:47][][0 ms][INFO] === Request start === [2025-08-22 14:29:55][353255360722071][0 ms][INFO] === Request start === [2025-08-22 14:29:56][][0 ms][INFO] === Request start === [2025-08-22 14:29:58][][0 ms][INFO] === Request start === [2025-08-22 14:30:03][][0 ms][INFO] === Request start === [2025-08-22 14:30:06][350200951380635][0 ms][INFO] === Request start === [2025-08-22 14:30:07][][0 ms][INFO] === Request start === [2025-08-22 14:30:11][352749386406751][0 ms][INFO] === Request start === [2025-08-22 14:30:12][350356670693011][0 ms][INFO] === Request start === [2025-08-22 14:30:16][][0 ms][INFO] === Request start === [2025-08-22 14:30:17][][0 ms][INFO] === Request start === [2025-08-22 14:30:18][][1 ms][INFO] === Request start === [2025-08-22 14:30:23][][0 ms][INFO] === Request start === [2025-08-22 14:30:25][350200951380635][0 ms][INFO] === Request start === [2025-08-22 14:30:31][352749386406751][1 ms][INFO] === Request start === [2025-08-22 14:30:32][350356670693011][1 ms][INFO] === Request start === [2025-08-22 14:30:37][][0 ms][INFO] === Request start === [2025-08-22 14:30:38][][0 ms][INFO] === Request start === [2025-08-22 14:30:49][357435844291242][0 ms][INFO] === Request start === [2025-08-22 14:30:50][350200951380635][0 ms][INFO] === Request start === [2025-08-22 14:30:55][352749386406751][0 ms][INFO] === Request start === [2025-08-22 14:30:57][350356670693011][0 ms][INFO] === Request start === [2025-08-22 14:30:58][][0 ms][INFO] === Request start === [2025-08-22 14:31:06][350362204000236][0 ms][INFO] === Request start === [2025-08-22 14:31:09][357435844291242][0 ms][INFO] === Request start === [2025-08-22 14:31:09][350200951380635][1 ms][INFO] === Request start === [2025-08-22 14:31:14][352749386406751][0 ms][INFO] === Request start === [2025-08-22 14:31:16][350356670693011][1 ms][INFO] === Request start === [2025-08-22 14:31:26][350362204000236][1 ms][INFO] === Request start === [2025-08-22 14:31:31][359619102684333][0 ms][INFO] === Request start === [2025-08-22 14:31:32][][0 ms][INFO] === Request start === [2025-08-22 14:31:33][358212588042993][0 ms][INFO] === Request start === [2025-08-22 14:31:33][357435844291242][0 ms][INFO] === Request start === [2025-08-22 14:31:37][][0 ms][INFO] === Request start === [2025-08-22 14:31:39][][0 ms][INFO] === Request start === [2025-08-22 14:31:49][][0 ms][INFO] === Request start === [2025-08-22 14:31:50][359619102684333][0 ms][INFO] === Request start === [2025-08-22 14:31:52][][0 ms][INFO] === Request start === [2025-08-22 14:31:53][358212588042993][0 ms][INFO] === Request start === [2025-08-22 14:31:53][357435844291242][0 ms][INFO] === Request start === [2025-08-22 14:31:57][][0 ms][INFO] === Request start === [2025-08-22 14:31:59][][0 ms][INFO] === Request start === [2025-08-22 14:32:08][][0 ms][INFO] === Request start === [2025-08-22 14:32:10][350896383511299][0 ms][INFO] === Request start === [2025-08-22 14:32:13][][0 ms][INFO] === Request start === [2025-08-22 14:32:16][][0 ms][INFO] === Request start === [2025-08-22 14:32:18][358212588042993][0 ms][INFO] === Request start === [2025-08-22 14:32:25][351782256821545][1 ms][INFO] === Request start === [2025-08-22 14:32:28][350792521066967][0 ms][INFO] === Request start === [2025-08-22 14:32:30][350896383511299][0 ms][INFO] === Request start === [2025-08-22 14:32:31][][0 ms][INFO] === Request start === [2025-08-22 14:32:33][][0 ms][INFO] === Request start === [2025-08-22 14:32:35][][0 ms][INFO] === Request start === [2025-08-22 14:32:37][358212588042993][1 ms][INFO] === Request start === [2025-08-22 14:32:44][351782256821545][1 ms][INFO] === Request start === [2025-08-22 14:32:48][350792521066967][1 ms][INFO] === Request start === [2025-08-22 14:32:51][][0 ms][INFO] === Request start === [2025-08-22 14:32:55][350896383511299][0 ms][INFO] === Request start === [2025-08-22 14:32:55][][0 ms][INFO] === Request start === [2025-08-22 14:33:00][][0 ms][INFO] === Request start === [2025-08-22 14:33:09][351782256821545][0 ms][INFO] === Request start === [2025-08-22 14:33:11][350792521066967][1 ms][INFO] === Request start === [2025-08-22 14:33:14][350896383511299][0 ms][INFO] === Request start === [2025-08-22 14:33:15][][1 ms][INFO] === Request start === [2025-08-22 14:33:16][357879701770907][0 ms][INFO] === Request start === [2025-08-22 14:33:20][][0 ms][INFO] === Request start === [2025-08-22 14:33:28][351272333741619][0 ms][INFO] === Request start === [2025-08-22 14:33:29][351782256821545][0 ms][INFO] === Request start === [2025-08-22 14:33:31][350792521066967][0 ms][INFO] === Request start === [2025-08-22 14:33:36][357879701770907][0 ms][INFO] === Request start === [2025-08-22 14:33:37][][1 ms][INFO] === Request start === [2025-08-22 14:33:42][351285623549252][0 ms][INFO] === Request start === [2025-08-22 14:33:48][350498055346987][0 ms][INFO] === Request start === [2025-08-22 14:33:48][351272333741619][0 ms][INFO] === Request start === [2025-08-22 14:33:51][][0 ms][INFO] === Request start === [2025-08-22 14:33:54][][0 ms][INFO] === Request start === [2025-08-22 14:33:57][][0 ms][INFO] === Request start === [2025-08-22 14:34:00][357879701770907][0 ms][INFO] === Request start === [2025-08-22 14:34:02][351285623549252][0 ms][INFO] === Request start === [2025-08-22 14:34:07][350498055346987][0 ms][INFO] === Request start === [2025-08-22 14:34:11][][0 ms][INFO] === Request start === [2025-08-22 14:34:11][][0 ms][INFO] === Request start === [2025-08-22 14:34:13][][0 ms][INFO] === Request start === [2025-08-22 14:34:20][357879701770907][0 ms][INFO] === Request start === [2025-08-22 14:34:22][353182207193714][0 ms][INFO] === Request start === [2025-08-22 14:34:26][351285623549252][1 ms][INFO] === Request start === [2025-08-22 14:34:29][353684140253299][0 ms][INFO] === Request start === [2025-08-22 14:34:30][][0 ms][INFO] === Request start === [2025-08-22 14:34:32][350498055346987][0 ms][INFO] === Request start === [2025-08-22 14:34:40][353842191201944][0 ms][INFO] === Request start === [2025-08-22 14:34:42][353182207193714][0 ms][INFO] === Request start === [2025-08-22 14:34:43][][1 ms][INFO] === Request start === [2025-08-22 14:34:43][354086980537303][0 ms][INFO] === Request start === [2025-08-22 14:34:46][351285623549252][0 ms][INFO] === Request start === [2025-08-22 14:34:49][353684140253299][1 ms][INFO] === Request start === [2025-08-22 14:34:51][350498055346987][1 ms][INFO] === Request start === [2025-08-22 14:34:53][][1 ms][INFO] === Request start === [2025-08-22 14:35:00][353842191201944][0 ms][INFO] === Request start === [2025-08-22 14:35:02][][0 ms][INFO] === Request start === [2025-08-22 14:35:03][354086980537303][0 ms][INFO] === Request start === [2025-08-22 14:35:07][353182207193714][1 ms][INFO] === Request start === [2025-08-22 14:35:08][][0 ms][INFO] === Request start === [2025-08-22 14:35:13][][0 ms][INFO] === Request start === [2025-08-22 14:35:14][353684140253299][1 ms][INFO] === Request start === [2025-08-22 14:35:14][][1 ms][INFO] === Request start === [2025-08-22 14:35:23][][0 ms][INFO] === Request start === [2025-08-22 14:35:26][353182207193714][0 ms][INFO] === Request start === [2025-08-22 14:35:27][354086980537303][1 ms][INFO] === Request start === [2025-08-22 14:35:28][][0 ms][INFO] === Request start === [2025-08-22 14:35:29][359044475850587][0 ms][INFO] === Request start === [2025-08-22 14:35:33][353684140253299][0 ms][INFO] === Request start === [2025-08-22 14:35:34][][0 ms][INFO] === Request start === [2025-08-22 14:35:42][][0 ms][INFO] === Request start === [2025-08-22 14:35:47][354086980537303][0 ms][INFO] === Request start === [2025-08-22 14:35:48][359044475850587][0 ms][INFO] === Request start === [2025-08-22 14:35:49][][0 ms][INFO] === Request start === [2025-08-22 14:35:56][][0 ms][INFO] === Request start === [2025-08-22 14:36:04][353302721758897][1 ms][INFO] === Request start === [2025-08-22 14:36:05][][0 ms][INFO] === Request start === [2025-08-22 14:36:06][354099889017400][0 ms][INFO] === Request start === [2025-08-22 14:36:09][][0 ms][INFO] === Request start === [2025-08-22 14:36:09][][0 ms][INFO] === Request start === [2025-08-22 14:36:13][359044475850587][0 ms][INFO] === Request start === [2025-08-22 14:36:16][][0 ms][INFO] === Request start === [2025-08-22 14:36:24][353302721758897][0 ms][INFO] === Request start === [2025-08-22 14:36:25][][0 ms][INFO] === Request start === [2025-08-22 14:36:26][354099889017400][0 ms][INFO] === Request start === [2025-08-22 14:36:29][][0 ms][INFO] === Request start === [2025-08-22 14:36:33][359044475850587][0 ms][INFO] === Request start === [2025-08-22 14:36:35][353089185109689][0 ms][INFO] === Request start === [2025-08-22 14:36:41][352879323441049][0 ms][INFO] === Request start === [2025-08-22 14:36:46][350616254667016][0 ms][INFO] === Request start === [2025-08-22 14:36:49][353302721758897][0 ms][INFO] === Request start === [2025-08-22 14:36:51][354099889017400][0 ms][INFO] === Request start === [2025-08-22 14:36:52][357967971009757][1 ms][INFO] === Request start === [2025-08-22 14:36:54][353089185109689][1 ms][INFO] === Request start === [2025-08-22 14:36:55][][0 ms][INFO] === Request start === [2025-08-22 14:36:56][352549935500645][1 ms][INFO] === Request start === [2025-08-22 14:37:01][352879323441049][0 ms][INFO] === Request start === [2025-08-22 14:37:06][350616254667016][0 ms][INFO] === Request start === [2025-08-22 14:37:08][353302721758897][0 ms][INFO] === Request start === [2025-08-22 14:37:10][354099889017400][0 ms][INFO] === Request start === [2025-08-22 14:37:11][357967971009757][1 ms][INFO] === Request start === [2025-08-22 14:37:15][][0 ms][INFO] === Request start === [2025-08-22 14:37:16][352549935500645][0 ms][INFO] === Request start === [2025-08-22 14:37:19][353089185109689][1 ms][INFO] === Request start === [2025-08-22 14:37:26][352879323441049][1 ms][INFO] === Request start === [2025-08-22 14:37:30][350616254667016][0 ms][INFO] === Request start === [2025-08-22 14:37:31][][1 ms][INFO] === Request start === [2025-08-22 14:37:33][][0 ms][INFO] === Request start === [2025-08-22 14:37:34][][0 ms][INFO] === Request start === [2025-08-22 14:37:39][353089185109689][0 ms][INFO] === Request start === [2025-08-22 14:37:41][352549935500645][0 ms][INFO] === Request start === [2025-08-22 14:37:45][352879323441049][0 ms][INFO] === Request start === [2025-08-22 14:37:50][350616254667016][0 ms][INFO] === Request start === [2025-08-22 14:37:51][][0 ms][INFO] === Request start === [2025-08-22 14:37:53][][0 ms][INFO] === Request start === [2025-08-22 14:37:54][][0 ms][INFO] === Request start === [2025-08-22 14:38:00][352549935500645][0 ms][INFO] === Request start === [2025-08-22 14:38:01][][1 ms][INFO] === Request start === [2025-08-22 14:38:08][][0 ms][INFO] === Request start === [2025-08-22 14:38:13][][0 ms][INFO] === Request start === [2025-08-22 14:38:16][][0 ms][INFO] === Request start === [2025-08-22 14:38:21][][1 ms][INFO] === Request start === [2025-08-22 14:38:23][][0 ms][INFO] === Request start === [2025-08-22 14:38:28][][0 ms][INFO] === Request start === [2025-08-22 14:38:31][352623179511665][0 ms][INFO] === Request start === [2025-08-22 14:38:32][][0 ms][INFO] === Request start === [2025-08-22 14:38:36][][0 ms][INFO] === Request start === [2025-08-22 14:38:42][359619102684333][0 ms][INFO] === Request start === [2025-08-22 14:38:43][][0 ms][INFO] === Request start === [2025-08-22 14:38:51][352623179511665][0 ms][INFO] === Request start === [2025-08-22 14:38:56][352731456007644][1 ms][INFO] === Request start === [2025-08-22 14:39:02][359619102684333][0 ms][INFO] === Request start === [2025-08-22 14:39:15][352731456007644][0 ms][INFO] === Request start === [2025-08-22 14:39:16][352623179511665][1 ms][INFO] === Request start === [2025-08-22 14:39:24][][0 ms][INFO] === Request start === [2025-08-22 14:39:35][352623179511665][1 ms][INFO] === Request start === [2025-08-22 14:39:38][][0 ms][INFO] === Request start === [2025-08-22 14:39:44][][1 ms][INFO] === Request start === [2025-08-22 14:39:58][][0 ms][INFO] === Request start === [2025-08-22 14:39:58][][0 ms][INFO] === Request start === [2025-08-22 14:40:07][][1 ms][INFO] === Request start === [2025-08-22 14:40:17][][0 ms][INFO] === Request start === [2025-08-22 14:40:21][][0 ms][INFO] === Request start === [2025-08-22 14:40:26][][0 ms][INFO] === Request start === [2025-08-22 14:40:40][][0 ms][INFO] === Request start === [2025-08-22 14:42:48][354747953759881][1 ms][INFO] === Request start === [2025-08-22 14:43:06][351088371987272][0 ms][INFO] === Request start === [2025-08-22 14:43:08][354747953759881][1 ms][INFO] === Request start === [2025-08-22 14:43:26][351088371987272][0 ms][INFO] === Request start === [2025-08-22 14:43:32][354747953759881][0 ms][INFO] === Request start === [2025-08-22 14:43:50][351088371987272][0 ms][INFO] === Request start === [2025-08-22 14:43:52][354747953759881][0 ms][INFO] === Request start === [2025-08-22 14:44:10][351088371987272][0 ms][INFO] === Request start === [2025-08-22 14:44:15][][1 ms][INFO] === Request start === [2025-08-22 14:44:33][][0 ms][INFO] === Request start === [2025-08-22 14:44:34][][0 ms][INFO] === Request start === [2025-08-22 14:44:52][][1 ms][INFO] === Request start === [2025-08-22 14:47:07][350455582007995][1 ms][INFO] === Request start === [2025-08-22 14:47:27][350455582007995][0 ms][INFO] === Request start === [2025-08-22 14:47:49][][0 ms][INFO] === Request start === [2025-08-22 14:48:07][352978606093533][0 ms][INFO] === Request start === [2025-08-22 14:48:09][][1 ms][INFO] === Request start === [2025-08-22 14:48:26][352978606093533][1 ms][INFO] === Request start === [2025-08-22 14:48:27][350362204000236][0 ms][INFO] === Request start === [2025-08-22 14:48:32][][0 ms][INFO] === Request start === [2025-08-22 14:48:47][350362204000236][0 ms][INFO] === Request start === [2025-08-22 14:48:49][][0 ms][INFO] === Request start === [2025-08-22 14:48:51][][0 ms][INFO] === Request start === [2025-08-22 14:49:09][][0 ms][INFO] === Request start === [2025-08-22 14:49:10][][0 ms][INFO] === Request start === [2025-08-22 14:49:29][][0 ms][INFO] === Request start === [2025-08-22 14:49:31][][0 ms][INFO] === Request start === [2025-08-22 14:49:51][][1 ms][INFO] === Request start === [2025-08-22 14:49:52][][0 ms][INFO] === Request start === [2025-08-22 14:50:12][][0 ms][INFO] === Request start === [2025-08-22 14:55:03][352731456007644][1 ms][INFO] === Request start === [2025-08-22 14:55:23][352731456007644][0 ms][INFO] === Request start === [2025-08-22 14:55:46][][0 ms][INFO] === Request start === [2025-08-22 14:56:05][][1 ms][INFO] === Request start === [2025-08-22 14:56:28][][0 ms][INFO] === Request start === [2025-08-22 14:56:48][][0 ms][INFO] === Request start === [2025-08-22 15:00:01][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:00:08][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:00:10][350603386469669][1 ms][INFO] === Request start === [2025-08-22 15:00:18][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:00:25][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:00:27][350603386469669][0 ms][INFO] === Request start === [2025-08-22 15:00:38][][0 ms][INFO] === Request start === [2025-08-22 15:00:45][][0 ms][INFO] === Request start === [2025-08-22 15:00:47][][0 ms][INFO] === Request start === [2025-08-22 15:00:55][][0 ms][INFO] === Request start === [2025-08-22 15:01:01][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:01:02][][1 ms][INFO] === Request start === [2025-08-22 15:01:04][][0 ms][INFO] === Request start === [2025-08-22 15:01:10][350637545708948][1 ms][INFO] === Request start === [2025-08-22 15:01:11][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:01:15][][0 ms][INFO] === Request start === [2025-08-22 15:01:18][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:01:22][][0 ms][INFO] === Request start === [2025-08-22 15:01:24][][0 ms][INFO] === Request start === [2025-08-22 15:01:26][350637545708948][0 ms][INFO] === Request start === [2025-08-22 15:01:28][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:01:32][][0 ms][INFO] === Request start === [2025-08-22 15:01:38][][0 ms][INFO] === Request start === [2025-08-22 15:01:38][][0 ms][INFO] === Request start === [2025-08-22 15:01:41][][0 ms][INFO] === Request start === [2025-08-22 15:01:46][][0 ms][INFO] === Request start === [2025-08-22 15:01:48][][0 ms][INFO] === Request start === [2025-08-22 15:01:53][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:01:55][][0 ms][INFO] === Request start === [2025-08-22 15:02:00][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:02:06][][0 ms][INFO] === Request start === [2025-08-22 15:02:07][][0 ms][INFO] === Request start === [2025-08-22 15:02:13][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:02:15][356168210912163][0 ms][INFO] === Request start === [2025-08-22 15:02:17][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:02:17][][1 ms][INFO] === Request start === [2025-08-22 15:02:20][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:02:29][][0 ms][INFO] === Request start === [2025-08-22 15:02:30][][0 ms][INFO] === Request start === [2025-08-22 15:02:34][356168210912163][0 ms][INFO] === Request start === [2025-08-22 15:02:35][][0 ms][INFO] === Request start === [2025-08-22 15:02:36][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:02:37][][0 ms][INFO] === Request start === [2025-08-22 15:02:42][][1 ms][INFO] === Request start === [2025-08-22 15:02:48][][0 ms][INFO] === Request start === [2025-08-22 15:02:50][][0 ms][INFO] === Request start === [2025-08-22 15:02:55][][0 ms][INFO] === Request start === [2025-08-22 15:02:57][][0 ms][INFO] === Request start === [2025-08-22 15:02:59][][0 ms][INFO] === Request start === [2025-08-22 15:03:01][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:03:02][][0 ms][INFO] === Request start === [2025-08-22 15:03:17][][0 ms][INFO] === Request start === [2025-08-22 15:03:18][][0 ms][INFO] === Request start === [2025-08-22 15:03:18][][0 ms][INFO] === Request start === [2025-08-22 15:03:21][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:03:24][][1 ms][INFO] === Request start === [2025-08-22 15:03:34][][1 ms][INFO] === Request start === [2025-08-22 15:03:37][][0 ms][INFO] === Request start === [2025-08-22 15:03:39][][0 ms][INFO] === Request start === [2025-08-22 15:03:41][][0 ms][INFO] === Request start === [2025-08-22 15:03:43][][0 ms][INFO] === Request start === [2025-08-22 15:03:44][][0 ms][INFO] === Request start === [2025-08-22 15:03:59][][0 ms][INFO] === Request start === [2025-08-22 15:04:01][][0 ms][INFO] === Request start === [2025-08-22 15:04:03][][0 ms][INFO] === Request start === [2025-08-22 15:04:26][][1 ms][INFO] === Request start === [2025-08-22 15:04:35][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:04:45][][0 ms][INFO] === Request start === [2025-08-22 15:04:55][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:05:18][][1 ms][INFO] === Request start === [2025-08-22 15:05:37][][0 ms][INFO] === Request start === [2025-08-22 15:06:00][][0 ms][INFO] === Request start === [2025-08-22 15:06:19][][0 ms][INFO] === Request start === [2025-08-22 15:08:28][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:08:47][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:09:10][][0 ms][INFO] === Request start === [2025-08-22 15:09:30][][1 ms][INFO] === Request start === [2025-08-22 15:09:52][][0 ms][INFO] === Request start === [2025-08-22 15:09:54][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:10:12][][1 ms][INFO] === Request start === [2025-08-22 15:10:14][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:10:36][][0 ms][INFO] === Request start === [2025-08-22 15:10:56][][0 ms][INFO] === Request start === [2025-08-22 15:11:19][][0 ms][INFO] === Request start === [2025-08-22 15:11:38][][0 ms][INFO] === Request start === [2025-08-22 15:16:25][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:16:45][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:17:07][][0 ms][INFO] === Request start === [2025-08-22 15:17:27][][0 ms][INFO] === Request start === [2025-08-22 15:17:50][][0 ms][INFO] === Request start === [2025-08-22 15:18:09][][0 ms][INFO] === Request start === [2025-08-22 15:18:15][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:18:16][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:18:34][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:18:36][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:18:57][][0 ms][INFO] === Request start === [2025-08-22 15:18:59][][0 ms][INFO] === Request start === [2025-08-22 15:19:17][][0 ms][INFO] === Request start === [2025-08-22 15:19:19][][0 ms][INFO] === Request start === [2025-08-22 15:19:39][][0 ms][INFO] === Request start === [2025-08-22 15:19:41][][0 ms][INFO] === Request start === [2025-08-22 15:19:59][][0 ms][INFO] === Request start === [2025-08-22 15:20:01][][0 ms][INFO] === Request start === [2025-08-22 15:20:20][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:20:40][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:20:47][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:21:03][][1 ms][INFO] === Request start === [2025-08-22 15:21:07][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:21:22][][0 ms][INFO] === Request start === [2025-08-22 15:21:29][][1 ms][INFO] === Request start === [2025-08-22 15:21:45][][0 ms][INFO] === Request start === [2025-08-22 15:21:49][][0 ms][INFO] === Request start === [2025-08-22 15:21:58][][3 ms][INFO] === Request start === [2025-08-22 15:22:05][][1 ms][INFO] === Request start === [2025-08-22 15:22:12][][0 ms][INFO] === Request start === [2025-08-22 15:22:31][][0 ms][INFO] === Request start === [2025-08-22 15:25:40][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:27:00][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:27:00][350362204000236][1 ms][DEBUG] START check_scloud [2025-08-22 15:27:00][350362204000236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:27:01][350362204000236][345 ms][DEBUG] SU: done in 343 ms; out [2025-08-22 15:27:01][350362204000236][345 ms][WARN] targetPkg: not running, restarting [2025-08-22 15:27:01][350362204000236][345 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 15:27:01][350362204000236][470 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 15:27:01][350362204000236][470 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 15:27:01][350362204000236][673 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 15:27:03][350362204000236][2688 ms][DEBUG] END check_scloud in 2687 ms [2025-08-22 15:27:03][350362204000236][2688 ms][DEBUG] START check_boot_completed [2025-08-22 15:27:03][350362204000236][2688 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:27:03][350362204000236][2735 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:27:03][350362204000236][2735 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:27:03][350362204000236][2797 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:27:03][350362204000236][2798 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 15:27:03][350362204000236][2798 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:27:03][350362204000236][2798 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362204000236\",\"model\":\"SM-G990B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW602L23P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9723\"}'\'' -e'"" [2025-08-22 15:27:03][350362204000236][2798 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:27:03][350362204000236][2798 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362204000236\",\"model\":\"SM-G990B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW602L23P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9723\"}'\'' -e'"" [2025-08-22 15:27:08][350362204000236][7765 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05bd6d31-3d49-497b-88cb-ac8e91627f3b","id":"QR_05bd6d31-3d49-497b-88cb-ac8e91627f3b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:27:08][350362204000236][7921 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3152 [2025-08-22 15:27:08][350362204000236][7921 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-08-22 15:27:08][350362204000236][7921 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:28:06][350603386469669][0 ms][INFO] === Request start === [2025-08-22 15:28:06][350603386469669][0 ms][DEBUG] START check_scloud [2025-08-22 15:28:06][350603386469669][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:28:06][350603386469669][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 22110 9964 23390136 127024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:28:06][350603386469669][304 ms][DEBUG] targetPkg: running [2025-08-22 15:28:06][350603386469669][304 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 15:28:06][350603386469669][304 ms][DEBUG] START check_boot_completed [2025-08-22 15:28:06][350603386469669][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:28:06][350603386469669][349 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 15:28:06][350603386469669][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:28:06][350603386469669][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:28:06][350603386469669][396 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 15:28:06][350603386469669][396 ms][DEBUG] START check_internet [2025-08-22 15:28:06][350603386469669][396 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:28:07][350603386469669][849 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.088/201.088/201.088/0.000 ms\n [2025-08-22 15:28:07][350603386469669][849 ms][DEBUG] check_internet: online [2025-08-22 15:28:07][350603386469669][849 ms][DEBUG] END check_internet in 453 ms [2025-08-22 15:28:07][350603386469669][849 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:28:07][350603386469669][849 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386469669\",\"model\":\"SM-A536E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCTA02M12P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5214\"}'\'' -e'"" [2025-08-22 15:28:07][350603386469669][849 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:28:07][350603386469669][849 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350603386469669\",\"model\":\"SM-A536E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCTA02M12P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5214\"}'\'' -e'"" [2025-08-22 15:28:12][350362204000236][1 ms][INFO] === Request start === [2025-08-22 15:28:13][350603386469669][7222 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5e97178d-ac70-4619-ab5d-c5475f4662f9","id":"QR_5e97178d-ac70-4619-ab5d-c5475f4662f9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:28:13][350603386469669][7379 ms][DEBUG] proc_open done in 6529 ms; code=255; res.len=3152 [2025-08-22 15:28:13][350603386469669][7379 ms][DEBUG] END runCmdUntilRes#1 in 6529 ms [2025-08-22 15:28:13][350603386469669][7379 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:28:13][350362204000236][1005 ms][DEBUG] START check_scloud [2025-08-22 15:28:13][350362204000236][1005 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:28:14][350362204000236][1286 ms][DEBUG] SU: done in 281 ms; outu0_a118 22110 9964 23581020 137928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:28:14][350362204000236][1286 ms][DEBUG] targetPkg: running [2025-08-22 15:28:14][350362204000236][1286 ms][DEBUG] END check_scloud in 282 ms [2025-08-22 15:28:14][350362204000236][1286 ms][DEBUG] START check_boot_completed [2025-08-22 15:28:14][350362204000236][1286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:28:14][350362204000236][1333 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:28:14][350362204000236][1333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:28:14][356168210912163][0 ms][INFO] === Request start === [2025-08-22 15:28:14][350362204000236][1380 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:28:14][350362204000236][1380 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:28:14][350362204000236][1380 ms][DEBUG] START check_internet [2025-08-22 15:28:14][350362204000236][1380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:28:14][350362204000236][1647 ms][DEBUG] SU: done in 267 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=164 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 164.032/164.032/164.032/0.000 ms\n [2025-08-22 15:28:14][350362204000236][1647 ms][DEBUG] check_internet: online [2025-08-22 15:28:14][350362204000236][1647 ms][DEBUG] END check_internet in 268 ms [2025-08-22 15:28:14][350362204000236][1647 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:28:14][350362204000236][1648 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362204000236\",\"model\":\"SM-G990B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW602L23P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4010\"}'\'' -e'"" [2025-08-22 15:28:14][350362204000236][1648 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:28:14][350362204000236][1648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362204000236\",\"model\":\"SM-G990B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW602L23P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4010\"}'\'' -e'"" [2025-08-22 15:28:18][350362204000236][5582 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c9d1954a-b0d4-4371-b2d7-da9562cb9fea","id":"QR_c9d1954a-b0d4-4371-b2d7-da9562cb9fea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:28:18][350362204000236][5738 ms][DEBUG] proc_open done in 4090 ms; code=255; res.len=3152 [2025-08-22 15:28:18][350362204000236][5738 ms][DEBUG] END runCmdUntilRes#1 in 4090 ms [2025-08-22 15:28:18][350362204000236][5738 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:28:19][356168210912163][5076 ms][DEBUG] START check_scloud [2025-08-22 15:28:19][356168210912163][5077 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:28:19][356168210912163][5389 ms][DEBUG] SU: done in 312 ms; outu0_a118 22110 9964 23728896 149896 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:28:19][356168210912163][5389 ms][DEBUG] targetPkg: running [2025-08-22 15:28:19][356168210912163][5389 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 15:28:19][356168210912163][5389 ms][DEBUG] START check_boot_completed [2025-08-22 15:28:19][356168210912163][5389 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:28:19][356168210912163][5420 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:28:19][356168210912163][5420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:28:19][356168210912163][5467 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:28:19][356168210912163][5468 ms][DEBUG] END check_boot_completed in 79 ms [2025-08-22 15:28:19][356168210912163][5468 ms][DEBUG] START check_internet [2025-08-22 15:28:19][356168210912163][5468 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:28:19][356168210912163][5733 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.415/153.415/153.415/0.000 ms\n [2025-08-22 15:28:19][356168210912163][5733 ms][DEBUG] check_internet: online [2025-08-22 15:28:19][356168210912163][5733 ms][DEBUG] END check_internet in 265 ms [2025-08-22 15:28:19][356168210912163][5733 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:28:19][356168210912163][5733 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356168210912163\",\"model\":\"SM-S901B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT901EL6L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2791\"}'\'' -e'"" [2025-08-22 15:28:19][356168210912163][5733 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:28:19][356168210912163][5733 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356168210912163\",\"model\":\"SM-S901B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CT901EL6L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2791\"}'\'' -e'"" [2025-08-22 15:28:23][356168210912163][9497 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f240d9cf-6037-40aa-a79d-95f7cfa57277","id":"QR_f240d9cf-6037-40aa-a79d-95f7cfa57277","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:28:23][356168210912163][9653 ms][DEBUG] proc_open done in 3920 ms; code=255; res.len=3152 [2025-08-22 15:28:23][356168210912163][9654 ms][DEBUG] END runCmdUntilRes#1 in 3920 ms [2025-08-22 15:28:23][356168210912163][9654 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:28:23][357799151016611][0 ms][INFO] === Request start === [2025-08-22 15:28:23][357799151016611][1 ms][DEBUG] START check_scloud [2025-08-22 15:28:23][357799151016611][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:28:24][357799151016611][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 22110 9964 23883656 160844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:28:24][357799151016611][286 ms][DEBUG] targetPkg: running [2025-08-22 15:28:24][357799151016611][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-22 15:28:24][357799151016611][286 ms][DEBUG] START check_boot_completed [2025-08-22 15:28:24][357799151016611][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:28:24][357799151016611][317 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:28:24][357799151016611][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:28:24][357799151016611][379 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:28:24][357799151016611][379 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 15:28:24][357799151016611][380 ms][DEBUG] START check_internet [2025-08-22 15:28:24][357799151016611][380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:28:24][357799151016611][645 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.959/140.959/140.959/0.000 ms\n [2025-08-22 15:28:24][357799151016611][645 ms][DEBUG] check_internet: online [2025-08-22 15:28:24][357799151016611][645 ms][DEBUG] END check_internet in 266 ms [2025-08-22 15:28:24][357799151016611][645 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:28:24][357799151016611][645 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799151016611\",\"model\":\"SM-A546E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCW40617YA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5369\"}'\'' -e'"" [2025-08-22 15:28:24][357799151016611][646 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:28:24][357799151016611][646 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357799151016611\",\"model\":\"SM-A546E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCW40617YA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5369\"}'\'' -e'"" [2025-08-22 15:28:29][357799151016611][6089 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_836e8208-f33e-4c3d-9016-0e6e69d4d2ca","id":"QR_836e8208-f33e-4c3d-9016-0e6e69d4d2ca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:28:30][357799151016611][6245 ms][DEBUG] proc_open done in 5600 ms; code=255; res.len=3152 [2025-08-22 15:28:30][357799151016611][6245 ms][DEBUG] END runCmdUntilRes#1 in 5600 ms [2025-08-22 15:28:30][357799151016611][6246 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:29:09][352967352522225][0 ms][INFO] === Request start === [2025-08-22 15:29:09][352967352522225][1 ms][DEBUG] START check_scloud [2025-08-22 15:29:09][352967352522225][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:29:09][352967352522225][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 22110 9964 23977908 173388 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:29:09][352967352522225][314 ms][DEBUG] targetPkg: running [2025-08-22 15:29:09][352967352522225][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 15:29:09][352967352522225][314 ms][DEBUG] START check_boot_completed [2025-08-22 15:29:09][352967352522225][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:29:09][352967352522225][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:29:09][352967352522225][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:29:09][352967352522225][409 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 15:29:09][352967352522225][409 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 15:29:09][352967352522225][409 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:29:09][352967352522225][409 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352522225\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8TB07ZXYB\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9964\"}'\'' -e'"" [2025-08-22 15:29:09][352967352522225][409 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:29:09][352967352522225][409 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967352522225\",\"model\":\"SM-A135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8TB07ZXYB\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9964\"}'\'' -e'"" [2025-08-22 15:29:16][352967352522225][6999 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d5a0d666-68a6-495c-a78d-ef10989815c5","id":"QR_d5a0d666-68a6-495c-a78d-ef10989815c5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:29:16][352967352522225][7155 ms][DEBUG] proc_open done in 6746 ms; code=255; res.len=3152 [2025-08-22 15:29:16][352967352522225][7155 ms][DEBUG] END runCmdUntilRes#1 in 6746 ms [2025-08-22 15:29:16][352967352522225][7156 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:30:07][354916446792557][1 ms][INFO] === Request start === [2025-08-22 15:30:07][354916446792557][1 ms][DEBUG] START check_scloud [2025-08-22 15:30:07][354916446792557][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:30:08][354916446792557][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 22110 9964 24122392 185360 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:30:08][354916446792557][282 ms][DEBUG] targetPkg: running [2025-08-22 15:30:08][354916446792557][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-22 15:30:08][354916446792557][282 ms][DEBUG] START check_boot_completed [2025-08-22 15:30:08][354916446792557][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:30:08][354916446792557][329 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:30:08][354916446792557][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:30:08][354916446792557][392 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 15:30:08][354916446792557][392 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 15:30:08][354916446792557][393 ms][DEBUG] START check_internet [2025-08-22 15:30:08][354916446792557][393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:30:08][354916446792557][766 ms][DEBUG] SU: done in 374 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.920/252.920/252.920/0.000 ms\n [2025-08-22 15:30:08][354916446792557][767 ms][DEBUG] check_internet: online [2025-08-22 15:30:08][354916446792557][767 ms][DEBUG] END check_internet in 374 ms [2025-08-22 15:30:08][354916446792557][767 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:30:08][354916446792557][767 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446792557\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W50JV2EY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2364\"}'\'' -e'"" [2025-08-22 15:30:08][354916446792557][767 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:30:08][354916446792557][767 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354916446792557\",\"model\":\"SM-A245F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W50JV2EY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2364\"}'\'' -e'"" [2025-08-22 15:30:12][354916446792557][5156 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9189eb32-4453-4923-9ed6-b9e438dc70d7","id":"QR_9189eb32-4453-4923-9ed6-b9e438dc70d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:30:13][354916446792557][5312 ms][DEBUG] proc_open done in 4545 ms; code=255; res.len=3152 [2025-08-22 15:30:13][354916446792557][5312 ms][DEBUG] END runCmdUntilRes#1 in 4545 ms [2025-08-22 15:30:13][354916446792557][5312 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:30:21][357967970798368][0 ms][INFO] === Request start === [2025-08-22 15:30:21][357967970798368][1 ms][DEBUG] START check_scloud [2025-08-22 15:30:21][357967970798368][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:30:21][357967970798368][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 22110 9964 24291488 196980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:30:21][357967970798368][316 ms][DEBUG] targetPkg: running [2025-08-22 15:30:21][357967970798368][316 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 15:30:21][357967970798368][316 ms][DEBUG] START check_boot_completed [2025-08-22 15:30:21][357967970798368][317 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:30:21][357967970798368][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:30:21][357967970798368][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:30:21][357967970798368][441 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 15:30:21][357967970798368][441 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 15:30:21][357967970798368][441 ms][DEBUG] START check_internet [2025-08-22 15:30:21][357967970798368][442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:30:22][357967970798368][738 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=170 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 170.696/170.696/170.696/0.000 ms\n [2025-08-22 15:30:22][357967970798368][738 ms][DEBUG] check_internet: online [2025-08-22 15:30:22][357967970798368][738 ms][DEBUG] END check_internet in 297 ms [2025-08-22 15:30:22][357967970798368][738 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:30:22][357967970798368][738 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970798368\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC0VHTNZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9464\"}'\'' -e'"" [2025-08-22 15:30:22][357967970798368][738 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:30:22][357967970798368][738 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970798368\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC0VHTNZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9464\"}'\'' -e'"" [2025-08-22 15:30:26][357967970798368][4643 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_faf0d6bf-ff99-4acb-a889-d97c63f062fa","id":"QR_faf0d6bf-ff99-4acb-a889-d97c63f062fa","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:30:26][357967970798368][4799 ms][DEBUG] proc_open done in 4061 ms; code=255; res.len=3152 [2025-08-22 15:30:26][357967970798368][4799 ms][DEBUG] END runCmdUntilRes#1 in 4061 ms [2025-08-22 15:30:26][357967970798368][4800 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:30:32][350100350065441][0 ms][INFO] === Request start === [2025-08-22 15:30:32][350100350065441][1 ms][DEBUG] START check_scloud [2025-08-22 15:30:32][350100350065441][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:30:33][350100350065441][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 22110 9964 24427780 206268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:30:33][350100350065441][312 ms][DEBUG] targetPkg: running [2025-08-22 15:30:33][350100350065441][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 15:30:33][350100350065441][312 ms][DEBUG] START check_boot_completed [2025-08-22 15:30:33][350100350065441][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:30:33][350100350065441][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:30:33][350100350065441][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:30:33][350100350065441][423 ms][DEBUG] SU: done in 64 ms; out [2025-08-22 15:30:33][350100350065441][423 ms][DEBUG] END check_boot_completed in 111 ms [2025-08-22 15:30:33][350100350065441][423 ms][DEBUG] START check_internet [2025-08-22 15:30:33][350100350065441][423 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:30:33][350100350065441][765 ms][DEBUG] SU: done in 342 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=209 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 209.733/209.733/209.733/0.000 ms\n [2025-08-22 15:30:33][350100350065441][765 ms][DEBUG] check_internet: online [2025-08-22 15:30:33][350100350065441][765 ms][DEBUG] END check_internet in 342 ms [2025-08-22 15:30:33][350100350065441][765 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:30:33][350100350065441][765 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100350065441\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX106JCNK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4988\"}'\'' -e'"" [2025-08-22 15:30:33][350100350065441][765 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:30:33][350100350065441][765 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350100350065441\",\"model\":\"SM-A546E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RRCX106JCNK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XME\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4988\"}'\'' -e'"" [2025-08-22 15:30:37][350100350065441][4795 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_775053c7-9aa7-47f0-af39-de5feecec44a","id":"QR_775053c7-9aa7-47f0-af39-de5feecec44a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:30:37][350100350065441][4951 ms][DEBUG] proc_open done in 4186 ms; code=255; res.len=3152 [2025-08-22 15:30:37][350100350065441][4951 ms][DEBUG] END runCmdUntilRes#1 in 4186 ms [2025-08-22 15:30:37][350100350065441][4951 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:31:06][351477971512798][0 ms][INFO] === Request start === [2025-08-22 15:31:06][351477971512798][1 ms][DEBUG] START check_scloud [2025-08-22 15:31:06][351477971512798][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:31:06][351477971512798][250 ms][DEBUG] SU: done in 249 ms; outu0_a118 22110 9964 24535364 218416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:31:06][351477971512798][250 ms][DEBUG] targetPkg: running [2025-08-22 15:31:06][351477971512798][250 ms][DEBUG] END check_scloud in 249 ms [2025-08-22 15:31:06][351477971512798][250 ms][DEBUG] START check_boot_completed [2025-08-22 15:31:06][351477971512798][250 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:31:06][351477971512798][297 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:31:06][351477971512798][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:31:06][351477971512798][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:31:06][351477971512798][344 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 15:31:06][351477971512798][344 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:31:06][351477971512798][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971512798\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB0GR5JA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9514\"}'\'' -e'"" [2025-08-22 15:31:06][351477971512798][344 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:31:06][351477971512798][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477971512798\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XB0GR5JA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9514\"}'\'' -e'"" [2025-08-22 15:31:10][351477971512798][4265 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_34cac43c-b648-460d-b518-3ca368e58b39","id":"QR_34cac43c-b648-460d-b518-3ca368e58b39","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:31:10][351477971512798][4421 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3152 [2025-08-22 15:31:10][351477971512798][4421 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-22 15:31:10][351477971512798][4421 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:33:06][351477978569403][1 ms][INFO] === Request start === [2025-08-22 15:33:06][351477978569403][2 ms][DEBUG] START check_scloud [2025-08-22 15:33:06][351477978569403][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:33:06][351477978569403][274 ms][DEBUG] SU: done in 273 ms; outu0_a118 22110 9964 24679784 229524 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:33:06][351477978569403][274 ms][DEBUG] targetPkg: running [2025-08-22 15:33:06][351477978569403][274 ms][DEBUG] END check_scloud in 273 ms [2025-08-22 15:33:06][351477978569403][274 ms][DEBUG] START check_boot_completed [2025-08-22 15:33:06][351477978569403][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:33:06][351477978569403][305 ms][DEBUG] ADB: done in 30 ms; out [2025-08-22 15:33:06][351477978569403][305 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:33:06][351477978569403][353 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 15:33:06][351477978569403][353 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 15:33:06][351477978569403][353 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:33:06][351477978569403][353 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477978569403\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC05DAZA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-08-22 15:33:06][351477978569403][353 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:33:06][351477978569403][353 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477978569403\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC05DAZA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6826\"}'\'' -e'"" [2025-08-22 15:33:11][351477978569403][4851 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e02c56ae-7d50-47dd-9afd-01dffe77d0c1","id":"QR_e02c56ae-7d50-47dd-9afd-01dffe77d0c1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:33:11][351477978569403][5007 ms][DEBUG] proc_open done in 4654 ms; code=255; res.len=3152 [2025-08-22 15:33:11][351477978569403][5007 ms][DEBUG] END runCmdUntilRes#1 in 4654 ms [2025-08-22 15:33:11][351477978569403][5007 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:35:10][350857488938803][1 ms][INFO] === Request start === [2025-08-22 15:35:10][350857488938803][1 ms][DEBUG] START check_scloud [2025-08-22 15:35:10][350857488938803][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:35:10][350857488938803][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 22110 9964 24824204 227740 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:35:10][350857488938803][301 ms][DEBUG] targetPkg: running [2025-08-22 15:35:10][350857488938803][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 15:35:10][350857488938803][301 ms][DEBUG] START check_boot_completed [2025-08-22 15:35:10][350857488938803][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:35:10][350857488938803][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:35:10][350857488938803][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:35:10][350857488938803][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:35:10][350857488938803][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:35:10][350857488938803][410 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:35:10][350857488938803][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857488938803\",\"model\":\"SM-A325F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TA0TK0BP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6757\"}'\'' -e'"" [2025-08-22 15:35:10][350857488938803][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:35:10][350857488938803][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857488938803\",\"model\":\"SM-A325F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TA0TK0BP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6757\"}'\'' -e'"" [2025-08-22 15:35:15][350857488938803][4784 ms][DEBUG] proc_open done in 4374 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 15:35:15][350857488938803][4784 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-22 15:35:15][350857488938803][4784 ms][WARN] Detected error: Process with pid 22110 either refused to load frida-agent, or terminated during injection [2025-08-22 15:35:15][350857488938803][4785 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 15:35:15][350857488938803][4940 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 15:35:15][350857488938803][4940 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 15:35:15][350857488938803][4940 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 15:35:15][350857488938803][5081 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 15:35:15][350857488938803][5081 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 15:35:15][350857488938803][5270 ms][DEBUG] SU: done in 189 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 15:35:17][350857488938803][7283 ms][DEBUG] START check_boot_completed [2025-08-22 15:35:17][350857488938803][7283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:35:17][350857488938803][7330 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:35:17][350857488938803][7330 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:35:17][350857488938803][7393 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:35:17][350857488938803][7393 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 15:35:20][350857488938803][10407 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 15:35:20][350857488938803][10408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350857488938803\",\"model\":\"SM-A325F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TA0TK0BP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6757\"}'\'' -e'"" [2025-08-22 15:35:25][350857488938803][14906 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2034a83d-00d2-43ef-baae-4e40daad13df","id":"QR_2034a83d-00d2-43ef-baae-4e40daad13df","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:35:25][350857488938803][15063 ms][DEBUG] proc_open done in 4655 ms; code=255; res.len=3152 [2025-08-22 15:35:25][350857488938803][15063 ms][DEBUG] END runCmdUntilRes#2 in 4655 ms [2025-08-22 15:35:25][350857488938803][15063 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:35:34][353842191184702][1 ms][INFO] === Request start === [2025-08-22 15:35:34][353842191184702][2 ms][DEBUG] START check_scloud [2025-08-22 15:35:34][353842191184702][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:35:34][353842191184702][257 ms][DEBUG] SU: done in 255 ms; outu0_a118 24287 9964 23477740 124836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:35:34][353842191184702][257 ms][DEBUG] targetPkg: running [2025-08-22 15:35:34][353842191184702][257 ms][DEBUG] END check_scloud in 255 ms [2025-08-22 15:35:34][353842191184702][257 ms][DEBUG] START check_boot_completed [2025-08-22 15:35:34][353842191184702][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:35:34][353842191184702][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:35:34][353842191184702][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:35:34][353842191184702][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:35:34][353842191184702][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:35:34][353842191184702][350 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:35:34][353842191184702][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842191184702\",\"model\":\"SM-A536E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT32XEVJP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1556\"}'\'' -e'"" [2025-08-22 15:35:34][353842191184702][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:35:34][353842191184702][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353842191184702\",\"model\":\"SM-A536E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT32XEVJP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1556\"}'\'' -e'"" [2025-08-22 15:35:41][353842191184702][7833 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_51b423e7-1dad-444a-8420-d597fbc2e810","id":"QR_51b423e7-1dad-444a-8420-d597fbc2e810","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:35:42][353842191184702][7989 ms][DEBUG] proc_open done in 7639 ms; code=255; res.len=3152 [2025-08-22 15:35:42][353842191184702][7989 ms][DEBUG] END runCmdUntilRes#1 in 7639 ms [2025-08-22 15:35:42][353842191184702][7989 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:36:03][352731456007644][0 ms][INFO] === Request start === [2025-08-22 15:36:03][352731456007644][1 ms][DEBUG] START check_scloud [2025-08-22 15:36:03][352731456007644][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:36:04][352731456007644][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 24287 9964 23509116 136212 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:36:04][352731456007644][280 ms][DEBUG] targetPkg: running [2025-08-22 15:36:04][352731456007644][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-22 15:36:04][352731456007644][280 ms][DEBUG] START check_boot_completed [2025-08-22 15:36:04][352731456007644][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:36:04][352731456007644][327 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:36:04][352731456007644][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:36:04][352731456007644][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:36:04][352731456007644][373 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:36:04][352731456007644][373 ms][DEBUG] START check_internet [2025-08-22 15:36:04][352731456007644][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:36:04][352731456007644][813 ms][DEBUG] SU: done in 439 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.165/201.165/201.165/0.000 ms\n [2025-08-22 15:36:04][352731456007644][813 ms][DEBUG] check_internet: online [2025-08-22 15:36:04][352731456007644][813 ms][DEBUG] END check_internet in 440 ms [2025-08-22 15:36:04][352731456007644][813 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:36:04][352731456007644][813 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456007644\",\"model\":\"SM-G998B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CR20DYPTP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8843\"}'\'' -e'"" [2025-08-22 15:36:04][352731456007644][813 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:36:04][352731456007644][813 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352731456007644\",\"model\":\"SM-G998B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R3CR20DYPTP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8843\"}'\'' -e'"" [2025-08-22 15:36:08][352731456007644][4982 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_223e03d7-7307-4280-a0fc-83f36d22a1e1","id":"QR_223e03d7-7307-4280-a0fc-83f36d22a1e1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:36:09][352731456007644][5138 ms][DEBUG] proc_open done in 4325 ms; code=255; res.len=3152 [2025-08-22 15:36:09][352731456007644][5138 ms][DEBUG] END runCmdUntilRes#1 in 4325 ms [2025-08-22 15:36:09][352731456007644][5138 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:36:11][354261101140069][0 ms][INFO] === Request start === [2025-08-22 15:36:11][354261101140069][1 ms][DEBUG] START check_scloud [2025-08-22 15:36:11][354261101140069][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:36:11][352277220524084][0 ms][INFO] === Request start === [2025-08-22 15:36:11][354261101140069][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 24287 9964 23643524 148028 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:36:11][354261101140069][311 ms][DEBUG] targetPkg: running [2025-08-22 15:36:11][354261101140069][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 15:36:11][354261101140069][311 ms][DEBUG] START check_boot_completed [2025-08-22 15:36:11][354261101140069][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:36:11][354261101140069][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:36:11][354261101140069][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:36:11][354261101140069][420 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:36:11][354261101140069][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:36:11][354261101140069][420 ms][DEBUG] START check_internet [2025-08-22 15:36:11][354261101140069][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:36:12][354261101140069][732 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=203 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 203.734/203.734/203.734/0.000 ms\n [2025-08-22 15:36:12][354261101140069][732 ms][DEBUG] check_internet: online [2025-08-22 15:36:12][354261101140069][733 ms][DEBUG] END check_internet in 313 ms [2025-08-22 15:36:12][354261101140069][733 ms][DEBUG] rawBody.length=1159 [2025-08-22 15:36:12][354261101140069][733 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261101140069\",\"model\":\"SM-X810\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W90LE64Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4867\"}'\'' -e'"" [2025-08-22 15:36:12][354261101140069][733 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:36:12][354261101140069][733 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354261101140069\",\"model\":\"SM-X810\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52W90LE64Y\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4867\"}'\'' -e'"" [2025-08-22 15:36:17][354261101140069][5887 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8110a164-c8aa-4a65-a9e0-78bf222f9502","id":"QR_8110a164-c8aa-4a65-a9e0-78bf222f9502","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:36:17][353415703038409][1 ms][INFO] === Request start === [2025-08-22 15:36:17][354261101140069][6043 ms][DEBUG] proc_open done in 5311 ms; code=255; res.len=3152 [2025-08-22 15:36:17][354261101140069][6043 ms][DEBUG] END runCmdUntilRes#1 in 5311 ms [2025-08-22 15:36:17][354261101140069][6043 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:36:17][353246111174381][1 ms][INFO] === Request start === [2025-08-22 15:36:17][353246111174381][1 ms][DEBUG] START check_scloud [2025-08-22 15:36:17][353246111174381][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:36:17][353246111174381][266 ms][DEBUG] SU: done in 265 ms; outu0_a118 24287 9964 23784076 158632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:36:17][353246111174381][267 ms][DEBUG] targetPkg: running [2025-08-22 15:36:17][353246111174381][267 ms][DEBUG] END check_scloud in 265 ms [2025-08-22 15:36:17][353246111174381][267 ms][DEBUG] START check_boot_completed [2025-08-22 15:36:17][353246111174381][267 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:36:17][353246111174381][313 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:36:17][353246111174381][313 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:36:17][353246111174381][360 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:36:17][353246111174381][360 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:36:17][353246111174381][360 ms][DEBUG] START check_internet [2025-08-22 15:36:17][353246111174381][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:36:18][353246111174381][610 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=147 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 147.799/147.799/147.799/0.000 ms\n [2025-08-22 15:36:18][353246111174381][610 ms][DEBUG] check_internet: online [2025-08-22 15:36:18][353246111174381][610 ms][DEBUG] END check_internet in 250 ms [2025-08-22 15:36:18][353246111174381][610 ms][DEBUG] rawBody.length=1159 [2025-08-22 15:36:18][353246111174381][610 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353246111174381\",\"model\":\"SM-T733\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52RB0DCJTF\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9820\"}'\'' -e'"" [2025-08-22 15:36:18][353246111174381][611 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:36:18][353246111174381][611 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353246111174381\",\"model\":\"SM-T733\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52RB0DCJTF\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9820\"}'\'' -e'"" [2025-08-22 15:36:23][353246111174381][5499 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d2055e68-61d0-4d40-b6a0-bd0836a4ca04","id":"QR_d2055e68-61d0-4d40-b6a0-bd0836a4ca04","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:36:23][353246111174381][5656 ms][DEBUG] proc_open done in 5045 ms; code=255; res.len=3152 [2025-08-22 15:36:23][353246111174381][5656 ms][DEBUG] END runCmdUntilRes#1 in 5045 ms [2025-08-22 15:36:23][353246111174381][5656 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:36:23][353415703038409][6088 ms][DEBUG] START check_scloud [2025-08-22 15:36:23][353415703038409][6088 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:36:23][353415703038409][6385 ms][DEBUG] SU: done in 297 ms; outu0_a118 24287 9964 23955348 170468 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:36:23][353415703038409][6385 ms][DEBUG] targetPkg: running [2025-08-22 15:36:23][353415703038409][6385 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 15:36:23][353415703038409][6385 ms][DEBUG] START check_boot_completed [2025-08-22 15:36:23][353415703038409][6385 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:36:23][353415703038409][6431 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:36:23][353415703038409][6431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:36:23][353415703038409][6494 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:36:23][353415703038409][6494 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:36:23][353415703038409][6494 ms][DEBUG] START check_internet [2025-08-22 15:36:23][353415703038409][6494 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:36:24][353415703038409][6744 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=134 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 134.890/134.890/134.890/0.000 ms\n [2025-08-22 15:36:24][353415703038409][6744 ms][DEBUG] check_internet: online [2025-08-22 15:36:24][353415703038409][6744 ms][DEBUG] END check_internet in 250 ms [2025-08-22 15:36:24][353415703038409][6744 ms][DEBUG] rawBody.length=1159 [2025-08-22 15:36:24][353415703038409][6744 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353415703038409\",\"model\":\"SM-X710\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X50D20AY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2900\"}'\'' -e'"" [2025-08-22 15:36:24][353415703038409][6744 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:36:24][353415703038409][6744 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353415703038409\",\"model\":\"SM-X710\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52X50D20AY\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2900\"}'\'' -e'"" [2025-08-22 15:36:28][352277220524084][0 ms][INFO] === Request start === [2025-08-22 15:36:28][352277220524084][1 ms][DEBUG] START check_scloud [2025-08-22 15:36:28][352277220524084][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:36:29][352277220524084][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 24287 9964 24114168 180932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:36:29][352277220524084][309 ms][DEBUG] targetPkg: running [2025-08-22 15:36:29][352277220524084][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-22 15:36:29][352277220524084][309 ms][DEBUG] START check_boot_completed [2025-08-22 15:36:29][352277220524084][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:36:29][352277220524084][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:36:29][352277220524084][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:36:29][352277220524084][403 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:36:29][352277220524084][403 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:36:29][352277220524084][403 ms][DEBUG] START check_internet [2025-08-22 15:36:29][352277220524084][403 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:36:29][353415703038409][11821 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_053e93f5-4ab7-4598-b0de-f1d89210c859","id":"QR_053e93f5-4ab7-4598-b0de-f1d89210c859","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:36:29][353415703038409][11977 ms][DEBUG] proc_open done in 5232 ms; code=255; res.len=3152 [2025-08-22 15:36:29][353415703038409][11977 ms][DEBUG] END runCmdUntilRes#1 in 5233 ms [2025-08-22 15:36:29][353415703038409][11977 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:36:29][352277220524084][637 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=122 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 122.621/122.621/122.621/0.000 ms\n [2025-08-22 15:36:29][352277220524084][637 ms][DEBUG] check_internet: online [2025-08-22 15:36:29][352277220524084][637 ms][DEBUG] END check_internet in 234 ms [2025-08-22 15:36:29][352277220524084][637 ms][DEBUG] rawBody.length=1159 [2025-08-22 15:36:29][352277220524084][637 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277220524084\",\"model\":\"SM-X910\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52WA0L75BN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8060\"}'\'' -e'"" [2025-08-22 15:36:29][352277220524084][637 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:36:29][352277220524084][637 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352277220524084\",\"model\":\"SM-X910\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R52WA0L75BN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAR\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC8060\"}'\'' -e'"" [2025-08-22 15:36:35][352277220524084][6495 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d19f8b81-6222-4f9b-ac5c-5596f955d3e9","id":"QR_d19f8b81-6222-4f9b-ac5c-5596f955d3e9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:36:35][352277220524084][6651 ms][DEBUG] proc_open done in 6014 ms; code=255; res.len=3152 [2025-08-22 15:36:35][352277220524084][6651 ms][DEBUG] END runCmdUntilRes#1 in 6014 ms [2025-08-22 15:36:35][352277220524084][6651 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:38:02][351663702213943][1 ms][INFO] === Request start === [2025-08-22 15:38:02][351663702213943][2 ms][DEBUG] START check_scloud [2025-08-22 15:38:02][351663702213943][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:38:02][351663702213943][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 24287 9964 24192036 194004 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:38:02][351663702213943][302 ms][DEBUG] targetPkg: running [2025-08-22 15:38:02][351663702213943][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 15:38:02][351663702213943][302 ms][DEBUG] START check_boot_completed [2025-08-22 15:38:02][351663702213943][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:38:02][351663702213943][348 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 15:38:02][351663702213943][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:38:02][351663702213943][426 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 15:38:02][351663702213943][426 ms][DEBUG] END check_boot_completed in 124 ms [2025-08-22 15:38:02][351663702213943][426 ms][DEBUG] START check_internet [2025-08-22 15:38:02][351663702213943][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:38:03][351663702213943][691 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=156 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 156.678/156.678/156.678/0.000 ms\n [2025-08-22 15:38:03][351663702213943][692 ms][DEBUG] check_internet: online [2025-08-22 15:38:03][351663702213943][692 ms][DEBUG] END check_internet in 265 ms [2025-08-22 15:38:03][351663702213943][692 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:38:03][351663702213943][692 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663702213943\",\"model\":\"SM-A047M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58W4080WDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3021\"}'\'' -e'"" [2025-08-22 15:38:03][351663702213943][692 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:38:03][351663702213943][692 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663702213943\",\"model\":\"SM-A047M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58W4080WDT\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3021\"}'\'' -e'"" [2025-08-22 15:38:09][357651719990748][0 ms][INFO] === Request start === [2025-08-22 15:38:09][351663702213943][7596 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cab79176-8b5b-4117-88b5-07639fa7b127","id":"QR_cab79176-8b5b-4117-88b5-07639fa7b127","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:38:10][351663702213943][7752 ms][DEBUG] proc_open done in 7061 ms; code=255; res.len=3152 [2025-08-22 15:38:10][351663702213943][7752 ms][DEBUG] END runCmdUntilRes#1 in 7061 ms [2025-08-22 15:38:10][351663702213943][7752 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:38:10][357651719990748][1006 ms][DEBUG] START check_scloud [2025-08-22 15:38:10][357651719990748][1006 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:38:10][357651719990748][1319 ms][DEBUG] SU: done in 313 ms; outu0_a118 24287 9964 24340780 204908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:38:10][357651719990748][1319 ms][DEBUG] targetPkg: running [2025-08-22 15:38:10][357651719990748][1319 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 15:38:10][357651719990748][1319 ms][DEBUG] START check_boot_completed [2025-08-22 15:38:10][357651719990748][1319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:38:11][357651719990748][1365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:38:11][357651719990748][1366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:38:11][357651719990748][1428 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 15:38:11][357651719990748][1428 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:38:11][357651719990748][1428 ms][DEBUG] START check_internet [2025-08-22 15:38:11][357651719990748][1428 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:38:11][357651719990748][1694 ms][DEBUG] SU: done in 265 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=139 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 139.064/139.064/139.064/0.000 ms\n [2025-08-22 15:38:11][357651719990748][1694 ms][DEBUG] check_internet: online [2025-08-22 15:38:11][357651719990748][1694 ms][DEBUG] END check_internet in 266 ms [2025-08-22 15:38:11][357651719990748][1694 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:38:11][357651719990748][1694 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651719990748\",\"model\":\"SM-A135M\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RX8TA06AZLJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2443\"}'\'' -e'"" [2025-08-22 15:38:11][357651719990748][1694 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:38:11][357651719990748][1694 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357651719990748\",\"model\":\"SM-A135M\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RX8TA06AZLJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"LEB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2443\"}'\'' -e'"" [2025-08-22 15:38:15][357651719990748][6036 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b75f19cf-9171-4fba-a7ad-77b1e88f125b","id":"QR_b75f19cf-9171-4fba-a7ad-77b1e88f125b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:38:15][357651719990748][6193 ms][DEBUG] proc_open done in 4498 ms; code=255; res.len=3152 [2025-08-22 15:38:15][357651719990748][6193 ms][DEBUG] END runCmdUntilRes#1 in 4499 ms [2025-08-22 15:38:15][357651719990748][6193 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:38:22][350299943157309][1 ms][INFO] === Request start === [2025-08-22 15:38:22][350299943157309][2 ms][DEBUG] START check_scloud [2025-08-22 15:38:22][350299943157309][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:38:23][350299943157309][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 24287 9964 24495668 215488 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:38:23][350299943157309][297 ms][DEBUG] targetPkg: running [2025-08-22 15:38:23][350299943157309][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-22 15:38:23][350299943157309][297 ms][DEBUG] START check_boot_completed [2025-08-22 15:38:23][350299943157309][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:38:23][350299943157309][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:38:23][350299943157309][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:38:23][350299943157309][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:38:23][350299943157309][376 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 15:38:23][350299943157309][376 ms][DEBUG] START check_internet [2025-08-22 15:38:23][350299943157309][376 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:38:23][350299943157309][735 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=257 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 257.101/257.101/257.101/0.000 ms\n [2025-08-22 15:38:23][350299943157309][735 ms][DEBUG] check_internet: online [2025-08-22 15:38:23][350299943157309][735 ms][DEBUG] END check_internet in 359 ms [2025-08-22 15:38:23][350299943157309][735 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:38:23][350299943157309][735 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299943157309\",\"model\":\"SM-G998B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CR10VBWWW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8050\"}'\'' -e'"" [2025-08-22 15:38:23][350299943157309][735 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:38:23][350299943157309][735 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350299943157309\",\"model\":\"SM-G998B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CR10VBWWW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8050\"}'\'' -e'"" [2025-08-22 15:38:27][350299943157309][5062 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_56076147-3e6b-4915-a1b4-eba7181fef4b","id":"QR_56076147-3e6b-4915-a1b4-eba7181fef4b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:38:27][350299943157309][5218 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3152 [2025-08-22 15:38:27][350299943157309][5218 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-22 15:38:27][350299943157309][5218 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:39:06][354068192723434][0 ms][INFO] === Request start === [2025-08-22 15:39:06][354068192723434][1 ms][DEBUG] START check_scloud [2025-08-22 15:39:06][354068192723434][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:39:06][354068192723434][285 ms][DEBUG] SU: done in 284 ms; outu0_a118 24287 9964 24571600 228016 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:39:06][354068192723434][285 ms][DEBUG] targetPkg: running [2025-08-22 15:39:06][354068192723434][285 ms][DEBUG] END check_scloud in 284 ms [2025-08-22 15:39:06][354068192723434][285 ms][DEBUG] START check_boot_completed [2025-08-22 15:39:06][354068192723434][285 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:39:06][354068192723434][331 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:39:06][354068192723434][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:39:06][354068192723434][424 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 15:39:06][354068192723434][425 ms][DEBUG] END check_boot_completed in 139 ms [2025-08-22 15:39:06][354068192723434][425 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:39:06][354068192723434][425 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192723434\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T81826SP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4604\"}'\'' -e'"" [2025-08-22 15:39:06][354068192723434][425 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:39:06][354068192723434][425 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354068192723434\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T81826SP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC4604\"}'\'' -e'"" [2025-08-22 15:39:10][354068192723434][4298 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9ca78b6-4950-45d7-9c18-1ab06b99ac69","id":"QR_e9ca78b6-4950-45d7-9c18-1ab06b99ac69","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:39:10][354068192723434][4455 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3152 [2025-08-22 15:39:10][354068192723434][4455 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-22 15:39:10][354068192723434][4455 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:42:22][355139241034369][1 ms][INFO] === Request start === [2025-08-22 15:42:22][355139241034369][2 ms][DEBUG] START check_scloud [2025-08-22 15:42:22][355139241034369][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:42:22][355139241034369][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 24287 9964 24745812 239100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:42:22][355139241034369][304 ms][DEBUG] targetPkg: running [2025-08-22 15:42:22][355139241034369][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 15:42:22][355139241034369][304 ms][DEBUG] START check_boot_completed [2025-08-22 15:42:22][355139241034369][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:42:22][355139241034369][335 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:42:22][355139241034369][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:42:22][355139241034369][382 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:42:22][355139241034369][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 15:42:22][355139241034369][382 ms][DEBUG] START check_internet [2025-08-22 15:42:22][355139241034369][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:42:22][355139241034369][929 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.471/202.471/202.471/0.000 ms\n [2025-08-22 15:42:22][355139241034369][929 ms][DEBUG] check_internet: online [2025-08-22 15:42:22][355139241034369][929 ms][DEBUG] END check_internet in 547 ms [2025-08-22 15:42:22][355139241034369][929 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:42:22][355139241034369][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139241034369\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y20159SN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6674\"}'\'' -e'"" [2025-08-22 15:42:22][355139241034369][929 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:42:22][355139241034369][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139241034369\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y20159SN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6674\"}'\'' -e'"" [2025-08-22 15:42:26][355139241034369][4725 ms][DEBUG] proc_open done in 3796 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 15:42:26][355139241034369][4726 ms][DEBUG] END runCmdUntilRes#1 in 3796 ms [2025-08-22 15:42:26][355139241034369][4726 ms][WARN] Detected error: Process with pid 24287 either refused to load frida-agent, or terminated during injection [2025-08-22 15:42:26][355139241034369][4726 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 15:42:26][355139241034369][4881 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 15:42:26][355139241034369][4882 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 15:42:26][355139241034369][4882 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 15:42:27][355139241034369][5006 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 15:42:27][355139241034369][5007 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 15:42:27][355139241034369][5178 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 15:42:29][355139241034369][7193 ms][DEBUG] START check_boot_completed [2025-08-22 15:42:29][355139241034369][7193 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:42:29][355139241034369][7240 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:42:29][355139241034369][7240 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:42:29][355139241034369][7287 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:42:29][355139241034369][7287 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 15:42:32][355139241034369][10302 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 15:42:32][355139241034369][10302 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355139241034369\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y20159SN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CGU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6674\"}'\'' -e'"" [2025-08-22 15:42:41][355139241034369][19065 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f05a55ce-487e-4117-9433-65ef88ea11e4","id":"QR_f05a55ce-487e-4117-9433-65ef88ea11e4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:42:41][355139241034369][19222 ms][DEBUG] proc_open done in 8920 ms; code=255; res.len=3152 [2025-08-22 15:42:41][355139241034369][19222 ms][DEBUG] END runCmdUntilRes#2 in 8920 ms [2025-08-22 15:42:41][355139241034369][19222 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:43:03][352060483120000][1 ms][INFO] === Request start === [2025-08-22 15:43:03][352060483120000][2 ms][DEBUG] START check_scloud [2025-08-22 15:43:03][352060483120000][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:43:03][352060483120000][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 26118 9964 23386900 126708 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:43:03][352060483120000][303 ms][DEBUG] targetPkg: running [2025-08-22 15:43:03][352060483120000][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 15:43:03][352060483120000][303 ms][DEBUG] START check_boot_completed [2025-08-22 15:43:03][352060483120000][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:43:03][352060483120000][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:43:03][352060483120000][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:43:03][352060483120000][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:43:03][352060483120000][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 15:43:03][352060483120000][381 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:43:03][352060483120000][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483120000\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X30AK45V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4840\"}'\'' -e'"" [2025-08-22 15:43:03][352060483120000][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:43:03][352060483120000][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352060483120000\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X30AK45V\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XSP\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4840\"}'\'' -e'"" [2025-08-22 15:43:07][352060483120000][4646 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d049538-fd82-4771-9604-ef4d73f8edcb","id":"QR_2d049538-fd82-4771-9604-ef4d73f8edcb","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:43:07][352060483120000][4802 ms][DEBUG] proc_open done in 4421 ms; code=255; res.len=3152 [2025-08-22 15:43:07][352060483120000][4802 ms][DEBUG] END runCmdUntilRes#1 in 4421 ms [2025-08-22 15:43:07][352060483120000][4802 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:43:14][353684143711004][0 ms][INFO] === Request start === [2025-08-22 15:43:14][353684143711004][1 ms][DEBUG] START check_scloud [2025-08-22 15:43:14][353684143711004][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:43:14][353684143711004][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 26118 9964 23549852 137428 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:43:14][353684143711004][305 ms][DEBUG] targetPkg: running [2025-08-22 15:43:14][353684143711004][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 15:43:14][353684143711004][305 ms][DEBUG] START check_boot_completed [2025-08-22 15:43:14][353684143711004][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:43:15][353684143711004][336 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:43:15][353684143711004][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:43:15][353684143711004][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:43:15][353684143711004][383 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 15:43:15][353684143711004][383 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:43:15][353684143711004][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143711004\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y60XXF3A\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5333\"}'\'' -e'"" [2025-08-22 15:43:15][353684143711004][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:43:15][353684143711004][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684143711004\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y60XXF3A\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC5333\"}'\'' -e'"" [2025-08-22 15:43:18][353684143711004][4210 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bbe2ab20-1d2a-4cf8-b560-0eaa452b9c56","id":"QR_bbe2ab20-1d2a-4cf8-b560-0eaa452b9c56","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:43:19][353684143711004][4366 ms][DEBUG] proc_open done in 3983 ms; code=255; res.len=3152 [2025-08-22 15:43:19][353684143711004][4366 ms][DEBUG] END runCmdUntilRes#1 in 3983 ms [2025-08-22 15:43:19][353684143711004][4366 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:45:10][357967970798368][1 ms][INFO] === Request start === [2025-08-22 15:45:10][357967970798368][2 ms][DEBUG] START check_scloud [2025-08-22 15:45:10][357967970798368][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:45:10][357967970798368][288 ms][DEBUG] SU: done in 286 ms; outu0_a118 26118 9964 23631760 148964 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:45:10][357967970798368][288 ms][DEBUG] targetPkg: running [2025-08-22 15:45:10][357967970798368][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-22 15:45:10][357967970798368][288 ms][DEBUG] START check_boot_completed [2025-08-22 15:45:10][357967970798368][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:45:10][357967970798368][335 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:45:10][357967970798368][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:45:10][357967970798368][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:45:10][357967970798368][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:45:10][357967970798368][398 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:45:10][357967970798368][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970798368\",\"model\":\"SM-A165F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8XC0VHTNZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9977\"}'\'' -e'"" [2025-08-22 15:45:10][357967970798368][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:45:10][357967970798368][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967970798368\",\"model\":\"SM-A165F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8XC0VHTNZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9977\"}'\'' -e'"" [2025-08-22 15:45:16][357967970798368][6037 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3efd1dd5-a487-4b97-9b45-3db170d89087","id":"QR_3efd1dd5-a487-4b97-9b45-3db170d89087","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:45:16][357967970798368][6193 ms][DEBUG] proc_open done in 5795 ms; code=255; res.len=3152 [2025-08-22 15:45:16][357967970798368][6193 ms][DEBUG] END runCmdUntilRes#1 in 5795 ms [2025-08-22 15:45:16][357967970798368][6193 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:45:22][350320360750994][0 ms][INFO] === Request start === [2025-08-22 15:45:22][350320360750994][1 ms][DEBUG] START check_scloud [2025-08-22 15:45:22][350320360750994][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:45:22][350320360750994][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 26118 9964 23809112 160008 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:45:22][350320360750994][271 ms][DEBUG] targetPkg: running [2025-08-22 15:45:22][350320360750994][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-22 15:45:22][350320360750994][271 ms][DEBUG] START check_boot_completed [2025-08-22 15:45:22][350320360750994][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:45:22][350320360750994][302 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:45:22][350320360750994][302 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:45:22][350320360750994][349 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:45:22][350320360750994][349 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 15:45:22][350320360750994][349 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:45:22][350320360750994][349 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320360750994\",\"model\":\"SM-A546E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3765\"}'\'' -e'"" [2025-08-22 15:45:22][350320360750994][349 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:45:22][350320360750994][349 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350320360750994\",\"model\":\"SM-A546E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW306SEYA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3765\"}'\'' -e'"" [2025-08-22 15:45:26][352861981397788][1 ms][INFO] === Request start === [2025-08-22 15:45:28][350320360750994][5598 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_59b4905a-a47a-4a99-8033-cebe65e864e0","id":"QR_59b4905a-a47a-4a99-8033-cebe65e864e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:45:28][350320360750994][5754 ms][DEBUG] proc_open done in 5405 ms; code=255; res.len=3152 [2025-08-22 15:45:28][350320360750994][5754 ms][DEBUG] END runCmdUntilRes#1 in 5405 ms [2025-08-22 15:45:28][350320360750994][5754 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:45:29][352861981397788][3034 ms][DEBUG] START check_scloud [2025-08-22 15:45:29][352861981397788][3034 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:45:29][352861981397788][3346 ms][DEBUG] SU: done in 312 ms; outu0_a118 26118 9964 23949664 171000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:45:29][352861981397788][3346 ms][DEBUG] targetPkg: running [2025-08-22 15:45:29][352861981397788][3346 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 15:45:29][352861981397788][3346 ms][DEBUG] START check_boot_completed [2025-08-22 15:45:29][352861981397788][3346 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:45:29][352861981397788][3393 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:45:29][352861981397788][3393 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:45:29][352861981397788][3441 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 15:45:29][352861981397788][3441 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 15:45:29][352861981397788][3441 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:45:29][352861981397788][3441 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861981397788\",\"model\":\"SM-A235M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8W301CFZZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8631\"}'\'' -e'"" [2025-08-22 15:45:29][352861981397788][3441 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:45:29][352861981397788][3441 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352861981397788\",\"model\":\"SM-A235M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8W301CFZZ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8631\"}'\'' -e'"" [2025-08-22 15:45:37][352861981397788][10891 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_35d2892f-8cb0-42a6-ba49-34ce4c48860c","id":"QR_35d2892f-8cb0-42a6-ba49-34ce4c48860c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:45:37][352861981397788][11047 ms][DEBUG] proc_open done in 7606 ms; code=255; res.len=3152 [2025-08-22 15:45:37][352861981397788][11047 ms][DEBUG] END runCmdUntilRes#1 in 7606 ms [2025-08-22 15:45:37][352861981397788][11047 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:45:52][357262975478459][0 ms][INFO] === Request start === [2025-08-22 15:45:52][357262975478459][1 ms][DEBUG] START check_scloud [2025-08-22 15:45:52][357262975478459][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:45:52][357262975478459][272 ms][DEBUG] SU: done in 271 ms; outu0_a118 26118 9964 24067580 183148 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:45:52][357262975478459][272 ms][DEBUG] targetPkg: running [2025-08-22 15:45:52][357262975478459][272 ms][DEBUG] END check_scloud in 271 ms [2025-08-22 15:45:52][357262975478459][272 ms][DEBUG] START check_boot_completed [2025-08-22 15:45:52][357262975478459][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:45:52][357262975478459][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:45:52][357262975478459][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:45:52][357262975478459][366 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 15:45:52][357262975478459][366 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 15:45:52][357262975478459][366 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:45:52][357262975478459][366 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262975478459\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX70WALTV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3348\"}'\'' -e'"" [2025-08-22 15:45:52][357262975478459][366 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:45:52][357262975478459][366 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357262975478459\",\"model\":\"SM-A556B\",\"profile_ID\":\"687a0a462a2ec21efe30daec\",\"group\":\"f99ef1cb-1551-43ad-b69d-a876ba2396c5\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX70WALTV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3348\"}'\'' -e'"" [2025-08-22 15:45:57][357262975478459][4676 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9f63c54-885d-418e-a45c-846abd54dead","id":"QR_e9f63c54-885d-418e-a45c-846abd54dead","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:45:57][357262975478459][4832 ms][DEBUG] proc_open done in 4466 ms; code=255; res.len=3152 [2025-08-22 15:45:57][357262975478459][4832 ms][DEBUG] END runCmdUntilRes#1 in 4466 ms [2025-08-22 15:45:57][357262975478459][4832 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:46:04][357567916340901][0 ms][INFO] === Request start === [2025-08-22 15:46:04][357567916340901][1 ms][DEBUG] START check_scloud [2025-08-22 15:46:04][357567916340901][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:46:05][357567916340901][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 26118 9964 24222404 194940 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:46:05][357567916340901][300 ms][DEBUG] targetPkg: running [2025-08-22 15:46:05][357567916340901][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 15:46:05][357567916340901][300 ms][DEBUG] START check_boot_completed [2025-08-22 15:46:05][357567916340901][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:46:05][357567916340901][347 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:46:05][357567916340901][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:46:05][357567916340901][409 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:46:05][357567916340901][409 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:46:05][357567916340901][409 ms][DEBUG] START check_internet [2025-08-22 15:46:05][357567916340901][410 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:46:05][357567916340901][893 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.809/202.809/202.809/0.000 ms\n [2025-08-22 15:46:05][357567916340901][894 ms][DEBUG] check_internet: online [2025-08-22 15:46:05][357567916340901][894 ms][DEBUG] END check_internet in 484 ms [2025-08-22 15:46:05][357567916340901][894 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:46:05][357567916340901][894 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567916340901\",\"model\":\"SM-A256E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX504HCLX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7128\"}'\'' -e'"" [2025-08-22 15:46:05][357567916340901][894 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:46:05][357567916340901][894 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357567916340901\",\"model\":\"SM-A256E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RXCX504HCLX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7128\"}'\'' -e'"" [2025-08-22 15:46:10][357567916340901][5955 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_79440060-8c3f-4f20-824b-dd962d16d5bf","id":"QR_79440060-8c3f-4f20-824b-dd962d16d5bf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:46:10][357567916340901][6111 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3152 [2025-08-22 15:46:10][357567916340901][6111 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-22 15:46:10][357567916340901][6111 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:46:11][358615318666438][0 ms][INFO] === Request start === [2025-08-22 15:46:11][358615318666438][1 ms][DEBUG] START check_scloud [2025-08-22 15:46:11][358615318666438][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:46:11][358615318666438][273 ms][DEBUG] SU: done in 272 ms; outu0_a118 26118 9964 24410208 205928 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:46:11][358615318666438][273 ms][DEBUG] targetPkg: running [2025-08-22 15:46:11][358615318666438][273 ms][DEBUG] END check_scloud in 272 ms [2025-08-22 15:46:11][358615318666438][273 ms][DEBUG] START check_boot_completed [2025-08-22 15:46:11][358615318666438][273 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:46:12][358615318666438][320 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:46:12][358615318666438][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:46:12][358615318666438][397 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 15:46:12][358615318666438][398 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 15:46:12][358615318666438][398 ms][DEBUG] START check_internet [2025-08-22 15:46:12][358615318666438][398 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:46:12][358615318666438][648 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=149 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 149.489/149.489/149.489/0.000 ms\n [2025-08-22 15:46:12][358615318666438][648 ms][DEBUG] check_internet: online [2025-08-22 15:46:12][358615318666438][648 ms][DEBUG] END check_internet in 250 ms [2025-08-22 15:46:12][358615318666438][648 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:46:12][358615318666438][648 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615318666438\",\"model\":\"SM-S711B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX506K0QN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3215\"}'\'' -e'"" [2025-08-22 15:46:12][358615318666438][648 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:46:12][358615318666438][648 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615318666438\",\"model\":\"SM-S711B\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQCX506K0QN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3215\"}'\'' -e'"" [2025-08-22 15:46:17][358615318666438][6006 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ff93c7c6-8d39-4d48-9f01-ca5a86fafc2d","id":"QR_ff93c7c6-8d39-4d48-9f01-ca5a86fafc2d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:46:17][358615318666438][6162 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3152 [2025-08-22 15:46:17][358615318666438][6162 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-22 15:46:17][358615318666438][6162 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:46:18][358385390299512][0 ms][INFO] === Request start === [2025-08-22 15:46:18][358385390299512][1 ms][DEBUG] START check_scloud [2025-08-22 15:46:18][358385390299512][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:46:18][358385390299512][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 26118 9964 24571076 216976 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:46:18][358385390299512][305 ms][DEBUG] targetPkg: running [2025-08-22 15:46:18][358385390299512][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 15:46:18][358385390299512][305 ms][DEBUG] START check_boot_completed [2025-08-22 15:46:18][358385390299512][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:46:18][358385390299512][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:46:18][358385390299512][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:46:18][358385390299512][400 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 15:46:18][358385390299512][400 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 15:46:18][358385390299512][400 ms][DEBUG] START check_internet [2025-08-22 15:46:18][358385390299512][400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:46:18][358385390299512][696 ms][DEBUG] SU: done in 295 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=188 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 188.773/188.773/188.773/0.000 ms\n [2025-08-22 15:46:18][358385390299512][696 ms][DEBUG] check_internet: online [2025-08-22 15:46:18][358385390299512][696 ms][DEBUG] END check_internet in 295 ms [2025-08-22 15:46:18][358385390299512][696 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:46:18][358385390299512][696 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7220\"}'\'' -e'"" [2025-08-22 15:46:18][358385390299512][696 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:46:18][358385390299512][696 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358385390299512\",\"model\":\"SM-A256E\",\"profile_ID\":\"68797274b090470e9b5e8669\",\"group\":\"cb212974-19c5-4828-86eb-51116c95d922\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RRCX4058MHH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"PHL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7220\"}'\'' -e'"" [2025-08-22 15:46:25][358385390299512][7288 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_42aa03fc-6877-4bd9-8d7c-ee84670d7d84","id":"QR_42aa03fc-6877-4bd9-8d7c-ee84670d7d84","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:46:25][358385390299512][7444 ms][DEBUG] proc_open done in 6748 ms; code=255; res.len=3152 [2025-08-22 15:46:25][358385390299512][7444 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-08-22 15:46:25][358385390299512][7444 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:47:19][350471128909099][0 ms][INFO] === Request start === [2025-08-22 15:47:19][350471128909099][1 ms][DEBUG] START check_scloud [2025-08-22 15:47:19][350471128909099][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:47:19][350471128909099][263 ms][DEBUG] SU: done in 262 ms; outu0_a118 26118 9964 24699232 229144 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:47:19][350471128909099][263 ms][DEBUG] targetPkg: running [2025-08-22 15:47:19][350471128909099][263 ms][DEBUG] END check_scloud in 262 ms [2025-08-22 15:47:19][350471128909099][263 ms][DEBUG] START check_boot_completed [2025-08-22 15:47:19][350471128909099][264 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:47:19][350471128909099][310 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:47:19][350471128909099][310 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:47:20][350471128909099][357 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:47:20][350471128909099][357 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:47:20][350471128909099][357 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:47:20][350471128909099][357 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128909099\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX8353A6B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2641\"}'\'' -e'"" [2025-08-22 15:47:20][350471128909099][357 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:47:20][350471128909099][357 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350471128909099\",\"model\":\"SM-A556E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CX8353A6B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2641\"}'\'' -e'"" [2025-08-22 15:47:24][350471128909099][4575 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d8a61fed-1c05-4ab8-9fb8-e617cde0247b","id":"QR_d8a61fed-1c05-4ab8-9fb8-e617cde0247b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:47:24][350471128909099][4731 ms][DEBUG] proc_open done in 4374 ms; code=255; res.len=3152 [2025-08-22 15:47:24][350471128909099][4731 ms][DEBUG] END runCmdUntilRes#1 in 4374 ms [2025-08-22 15:47:24][350471128909099][4731 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:48:49][350938287763871][1 ms][INFO] === Request start === [2025-08-22 15:48:49][350938287763871][2 ms][DEBUG] START check_scloud [2025-08-22 15:48:49][350938287763871][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:48:49][350938287763871][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 26118 9964 24829380 241200 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:48:49][350938287763871][314 ms][DEBUG] targetPkg: running [2025-08-22 15:48:49][350938287763871][314 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 15:48:49][350938287763871][314 ms][DEBUG] START check_boot_completed [2025-08-22 15:48:49][350938287763871][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:48:49][350938287763871][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:48:49][350938287763871][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:48:49][350938287763871][423 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:48:49][350938287763871][423 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:48:49][350938287763871][423 ms][DEBUG] START check_internet [2025-08-22 15:48:49][350938287763871][424 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:48:50][350938287763871][736 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.369/196.369/196.369/0.000 ms\n [2025-08-22 15:48:50][350938287763871][736 ms][DEBUG] check_internet: online [2025-08-22 15:48:50][350938287763871][736 ms][DEBUG] END check_internet in 312 ms [2025-08-22 15:48:50][350938287763871][736 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:48:50][350938287763871][736 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287763871\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y20BZYVH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7042\"}'\'' -e'"" [2025-08-22 15:48:50][350938287763871][736 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:48:50][350938287763871][736 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287763871\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y20BZYVH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7042\"}'\'' -e'"" [2025-08-22 15:48:54][350938287763871][4516 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 15:48:54][350938287763871][4516 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-22 15:48:54][350938287763871][4516 ms][WARN] Detected error: Process with pid 26118 either refused to load frida-agent, or terminated during injection [2025-08-22 15:48:54][350938287763871][4516 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 15:48:54][350938287763871][4657 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 15:48:54][350938287763871][4657 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 15:48:54][350938287763871][4657 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 15:48:54][350938287763871][4782 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 15:48:54][350938287763871][4782 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 15:48:54][350938287763871][4922 ms][DEBUG] SU: done in 141 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 15:48:56][350938287763871][6937 ms][DEBUG] START check_boot_completed [2025-08-22 15:48:56][350938287763871][6937 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:48:56][350938287763871][6984 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:48:56][350938287763871][6984 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:48:56][350938287763871][7031 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:48:56][350938287763871][7031 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 15:48:59][350938287763871][10046 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 15:48:59][350938287763871][10046 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938287763871\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y20BZYVH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7042\"}'\'' -e'"" [2025-08-22 15:49:03][350938287763871][14139 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a8b22862-da64-4f76-abc8-9e74812ebc0c","id":"QR_a8b22862-da64-4f76-abc8-9e74812ebc0c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:49:03][350938287763871][14295 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3152 [2025-08-22 15:49:03][350938287763871][14295 ms][DEBUG] END runCmdUntilRes#2 in 4249 ms [2025-08-22 15:49:03][350938287763871][14295 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:49:05][357967973695710][0 ms][INFO] === Request start === [2025-08-22 15:49:05][357967973695710][1 ms][DEBUG] START check_scloud [2025-08-22 15:49:05][357967973695710][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:49:05][357967973695710][251 ms][DEBUG] SU: done in 250 ms; outu0_a118 27311 9964 23480856 124224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:49:05][357967973695710][251 ms][DEBUG] targetPkg: running [2025-08-22 15:49:05][357967973695710][251 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 15:49:05][357967973695710][251 ms][DEBUG] START check_boot_completed [2025-08-22 15:49:05][357967973695710][251 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:49:05][357967973695710][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:49:05][357967973695710][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:49:05][357967973695710][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:49:05][357967973695710][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:49:05][357967973695710][345 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:49:05][357967973695710][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973695710\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y200YE6T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3181\"}'\'' -e'"" [2025-08-22 15:49:05][357967973695710][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:49:05][357967973695710][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967973695710\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y200YE6T\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3181\"}'\'' -e'"" [2025-08-22 15:49:09][357967973695710][4156 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b283c582-2d12-4c99-9f5e-3fdd922ad7ea","id":"QR_b283c582-2d12-4c99-9f5e-3fdd922ad7ea","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:49:09][357967973695710][4312 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3152 [2025-08-22 15:49:09][357967973695710][4312 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-22 15:49:09][357967973695710][4312 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:49:15][351477979670093][0 ms][INFO] === Request start === [2025-08-22 15:49:15][351477979670093][1 ms][DEBUG] START check_scloud [2025-08-22 15:49:15][351477979670093][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:49:16][351477979670093][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27311 9964 23663472 137504 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:49:16][351477979670093][305 ms][DEBUG] targetPkg: running [2025-08-22 15:49:16][351477979670093][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 15:49:16][351477979670093][305 ms][DEBUG] START check_boot_completed [2025-08-22 15:49:16][351477979670093][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:49:16][351477979670093][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:49:16][351477979670093][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:49:16][351477979670093][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:49:16][351477979670093][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:49:16][351477979670093][415 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:49:16][351477979670093][415 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979670093\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC0E5QBZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3710\"}'\'' -e'"" [2025-08-22 15:49:16][351477979670093][415 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:49:16][351477979670093][415 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979670093\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC0E5QBZ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3710\"}'\'' -e'"" [2025-08-22 15:49:20][351477979670093][4398 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_aea6d953-031c-4d97-a862-189456a8d5f2","id":"QR_aea6d953-031c-4d97-a862-189456a8d5f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:49:20][351477979670093][4554 ms][DEBUG] proc_open done in 4139 ms; code=255; res.len=3152 [2025-08-22 15:49:20][351477979670093][4554 ms][DEBUG] END runCmdUntilRes#1 in 4139 ms [2025-08-22 15:49:20][351477979670093][4554 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:49:26][354217639572561][0 ms][INFO] === Request start === [2025-08-22 15:49:26][354217639572561][1 ms][DEBUG] START check_scloud [2025-08-22 15:49:26][354217639572561][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:49:27][354217639572561][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 27311 9964 23723200 149748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:49:27][354217639572561][303 ms][DEBUG] targetPkg: running [2025-08-22 15:49:27][354217639572561][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 15:49:27][354217639572561][303 ms][DEBUG] START check_boot_completed [2025-08-22 15:49:27][354217639572561][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:49:27][354217639572561][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:49:27][354217639572561][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:49:27][354217639572561][396 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:49:27][354217639572561][396 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:49:27][354217639572561][396 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:49:27][354217639572561][396 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354217639572561\",\"model\":\"SM-S9180\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW80426LK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9093\"}'\'' -e'"" [2025-08-22 15:49:27][354217639572561][396 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:49:27][354217639572561][396 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354217639572561\",\"model\":\"SM-S9180\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW80426LK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"BRI\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9093\"}'\'' -e'"" [2025-08-22 15:49:31][354217639572561][4208 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9fdf7932-2092-4cd4-9aad-a236b531d02b","id":"QR_9fdf7932-2092-4cd4-9aad-a236b531d02b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:49:31][354217639572561][4364 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=3152 [2025-08-22 15:49:31][354217639572561][4364 ms][DEBUG] END runCmdUntilRes#1 in 3968 ms [2025-08-22 15:49:31][354217639572561][4364 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:51:04][356660711651290][1 ms][INFO] === Request start === [2025-08-22 15:51:04][356660711651290][2 ms][DEBUG] START check_scloud [2025-08-22 15:51:04][356660711651290][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:51:04][356660711651290][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 27311 9964 23807284 160764 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:51:04][356660711651290][301 ms][DEBUG] targetPkg: running [2025-08-22 15:51:04][356660711651290][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 15:51:04][356660711651290][301 ms][DEBUG] START check_boot_completed [2025-08-22 15:51:04][356660711651290][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:51:04][356660711651290][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:51:04][356660711651290][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:51:04][356660711651290][410 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:51:04][356660711651290][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:51:04][356660711651290][410 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:51:04][356660711651290][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356660711651290\",\"model\":\"SM-G780G\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R618PG8B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7815\"}'\'' -e'"" [2025-08-22 15:51:04][356660711651290][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:51:04][356660711651290][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356660711651290\",\"model\":\"SM-G780G\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58R618PG8B\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7815\"}'\'' -e'"" [2025-08-22 15:51:08][356660711651290][4784 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5d24adb2-515c-43bc-8f31-dfa8b6abab98","id":"QR_5d24adb2-515c-43bc-8f31-dfa8b6abab98","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:51:09][356660711651290][4940 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3152 [2025-08-22 15:51:09][356660711651290][4940 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-22 15:51:09][356660711651290][4940 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:52:06][353662910654136][0 ms][INFO] === Request start === [2025-08-22 15:52:06][353662910654136][1 ms][DEBUG] START check_scloud [2025-08-22 15:52:06][353662910654136][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:52:07][353662910654136][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 27311 9964 23932368 171664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:52:07][353662910654136][292 ms][DEBUG] targetPkg: running [2025-08-22 15:52:07][353662910654136][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-22 15:52:07][353662910654136][293 ms][DEBUG] START check_boot_completed [2025-08-22 15:52:07][353662910654136][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:52:07][353662910654136][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:52:07][353662910654136][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:52:07][353662910654136][417 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 15:52:07][353662910654136][417 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 15:52:07][353662910654136][417 ms][DEBUG] START check_internet [2025-08-22 15:52:07][353662910654136][417 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:52:07][353662910654136][917 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.547/200.547/200.547/0.000 ms\n [2025-08-22 15:52:07][353662910654136][917 ms][DEBUG] check_internet: online [2025-08-22 15:52:07][353662910654136][917 ms][DEBUG] END check_internet in 500 ms [2025-08-22 15:52:07][353662910654136][917 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:52:07][353662910654136][917 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353662910654136\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X30DK2VK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TLP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7206\"}'\'' -e'"" [2025-08-22 15:52:07][353662910654136][917 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:52:07][353662910654136][918 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353662910654136\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X30DK2VK\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TLP\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7206\"}'\'' -e'"" [2025-08-22 15:52:11][353662910654136][5103 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8ddae0c7-ffb9-47b2-b84a-3a1559bd9344","id":"QR_8ddae0c7-ffb9-47b2-b84a-3a1559bd9344","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:52:12][353662910654136][5260 ms][DEBUG] proc_open done in 4342 ms; code=255; res.len=3152 [2025-08-22 15:52:12][353662910654136][5260 ms][DEBUG] END runCmdUntilRes#1 in 4342 ms [2025-08-22 15:52:12][353662910654136][5260 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:53:04][357674436718077][1 ms][INFO] === Request start === [2025-08-22 15:53:04][357674436718077][1 ms][DEBUG] START check_scloud [2025-08-22 15:53:04][357674436718077][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:53:05][357674436718077][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 27311 9964 24068936 183688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:53:05][357674436718077][313 ms][DEBUG] targetPkg: running [2025-08-22 15:53:05][357674436718077][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 15:53:05][357674436718077][313 ms][DEBUG] START check_boot_completed [2025-08-22 15:53:05][357674436718077][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:53:05][357674436718077][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:53:05][357674436718077][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:53:05][357674436718077][407 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:53:05][357674436718077][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 15:53:05][357674436718077][407 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:53:05][357674436718077][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436718077\",\"model\":\"SM-M325F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T90GLCVH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4490\"}'\'' -e'"" [2025-08-22 15:53:05][357674436718077][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:53:05][357674436718077][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357674436718077\",\"model\":\"SM-M325F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T90GLCVH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4490\"}'\'' -e'"" [2025-08-22 15:53:09][357674436718077][4546 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bdee4c30-f200-48a0-b738-6b59438c793c","id":"QR_bdee4c30-f200-48a0-b738-6b59438c793c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:53:09][357674436718077][4702 ms][DEBUG] proc_open done in 4296 ms; code=255; res.len=3152 [2025-08-22 15:53:09][357674436718077][4702 ms][DEBUG] END runCmdUntilRes#1 in 4296 ms [2025-08-22 15:53:09][357674436718077][4702 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:54:07][350341124975446][1 ms][INFO] === Request start === [2025-08-22 15:54:07][350341124975446][2 ms][DEBUG] START check_scloud [2025-08-22 15:54:07][350341124975446][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:54:08][350341124975446][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 27311 9964 24191020 194788 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:54:08][350341124975446][297 ms][DEBUG] targetPkg: running [2025-08-22 15:54:08][350341124975446][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-22 15:54:08][350341124975446][297 ms][DEBUG] START check_boot_completed [2025-08-22 15:54:08][350341124975446][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:54:08][350341124975446][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:54:08][350341124975446][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:54:08][350341124975446][390 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:54:08][350341124975446][391 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:54:08][350341124975446][391 ms][DEBUG] START check_internet [2025-08-22 15:54:08][350341124975446][391 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:54:08][350341124975446][656 ms][DEBUG] SU: done in 266 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=158 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 158.823/158.823/158.823/0.000 ms\n [2025-08-22 15:54:08][350341124975446][656 ms][DEBUG] check_internet: online [2025-08-22 15:54:08][350341124975446][656 ms][DEBUG] END check_internet in 266 ms [2025-08-22 15:54:08][350341124975446][657 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:54:08][350341124975446][657 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124975446\",\"model\":\"SM-M135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8W100JJXD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9387\"}'\'' -e'"" [2025-08-22 15:54:08][350341124975446][657 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:54:08][350341124975446][657 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341124975446\",\"model\":\"SM-M135M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8W100JJXD\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9387\"}'\'' -e'"" [2025-08-22 15:54:13][350341124975446][5967 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9624a8fa-d543-45e0-a0be-77c1317b1723","id":"QR_9624a8fa-d543-45e0-a0be-77c1317b1723","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:54:14][350341124975446][6123 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3152 [2025-08-22 15:54:14][350341124975446][6124 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-22 15:54:14][350341124975446][6124 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:54:22][358184578070989][0 ms][INFO] === Request start === [2025-08-22 15:54:22][358184578070989][1 ms][DEBUG] START check_scloud [2025-08-22 15:54:22][358184578070989][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:54:22][358184578070989][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 27311 9964 24318260 206632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:54:22][358184578070989][302 ms][DEBUG] targetPkg: running [2025-08-22 15:54:22][358184578070989][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 15:54:22][358184578070989][302 ms][DEBUG] START check_boot_completed [2025-08-22 15:54:22][358184578070989][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:54:22][358184578070989][349 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:54:22][358184578070989][349 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:54:22][358184578070989][396 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 15:54:22][358184578070989][396 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 15:54:22][358184578070989][397 ms][DEBUG] START check_internet [2025-08-22 15:54:22][358184578070989][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:54:22][358184578070989][708 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.137/200.137/200.137/0.000 ms\n [2025-08-22 15:54:22][358184578070989][708 ms][DEBUG] check_internet: online [2025-08-22 15:54:22][358184578070989][708 ms][DEBUG] END check_internet in 312 ms [2025-08-22 15:54:22][358184578070989][708 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:54:22][358184578070989][709 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184578070989\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X50TYXKL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8460\"}'\'' -e'"" [2025-08-22 15:54:22][358184578070989][709 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:54:22][358184578070989][709 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184578070989\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X50TYXKL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8460\"}'\'' -e'"" [2025-08-22 15:54:26][358184578070989][4957 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d75b7eb6-eb15-4152-b9d9-4a4d6e56ff51","id":"QR_d75b7eb6-eb15-4152-b9d9-4a4d6e56ff51","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:54:27][358184578070989][5113 ms][DEBUG] proc_open done in 4404 ms; code=255; res.len=3152 [2025-08-22 15:54:27][358184578070989][5113 ms][DEBUG] END runCmdUntilRes#1 in 4405 ms [2025-08-22 15:54:27][358184578070989][5113 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:54:33][351123901486568][0 ms][INFO] === Request start === [2025-08-22 15:54:33][351123901486568][1 ms][DEBUG] START check_scloud [2025-08-22 15:54:33][351123901486568][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:54:33][351123901486568][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 27311 9964 24423960 217728 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:54:33][351123901486568][314 ms][DEBUG] targetPkg: running [2025-08-22 15:54:33][351123901486568][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 15:54:33][351123901486568][314 ms][DEBUG] START check_boot_completed [2025-08-22 15:54:33][351123901486568][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:54:33][351123901486568][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:54:33][351123901486568][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:54:33][351123901486568][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:54:33][351123901486568][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 15:54:33][351123901486568][408 ms][DEBUG] START check_internet [2025-08-22 15:54:33][351123901486568][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 15:54:34][351123901486568][658 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=159 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 159.679/159.679/159.679/0.000 ms\n [2025-08-22 15:54:34][351123901486568][658 ms][DEBUG] check_internet: online [2025-08-22 15:54:34][351123901486568][658 ms][DEBUG] END check_internet in 250 ms [2025-08-22 15:54:34][351123901486568][658 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:54:34][351123901486568][658 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901486568\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW30YQN7H\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6844\"}'\'' -e'"" [2025-08-22 15:54:34][351123901486568][659 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:54:34][351123901486568][659 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351123901486568\",\"model\":\"SM-A346M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW30YQN7H\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"LTP\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6844\"}'\'' -e'"" [2025-08-22 15:54:39][351123901486568][5610 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ee7fdf88-9d71-406a-8964-ffb8b3e1bef9","id":"QR_ee7fdf88-9d71-406a-8964-ffb8b3e1bef9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:54:39][351123901486568][5766 ms][DEBUG] proc_open done in 5107 ms; code=255; res.len=3152 [2025-08-22 15:54:39][351123901486568][5766 ms][DEBUG] END runCmdUntilRes#1 in 5107 ms [2025-08-22 15:54:39][351123901486568][5766 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:57:01][357962506220490][1 ms][INFO] === Request start === [2025-08-22 15:57:01][357962506220490][2 ms][DEBUG] START check_scloud [2025-08-22 15:57:01][357962506220490][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:57:01][357962506220490][308 ms][DEBUG] SU: done in 306 ms; outu0_a118 27311 9964 24541784 230172 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:57:01][357962506220490][308 ms][DEBUG] targetPkg: running [2025-08-22 15:57:01][357962506220490][308 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 15:57:01][357962506220490][308 ms][DEBUG] START check_boot_completed [2025-08-22 15:57:01][357962506220490][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:57:01][357962506220490][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:57:01][357962506220490][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:57:01][357962506220490][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:57:01][357962506220490][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 15:57:01][357962506220490][386 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:57:01][357962506220490][386 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506220490\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W70E57GH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2871\"}'\'' -e'"" [2025-08-22 15:57:01][357962506220490][387 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:57:01][357962506220490][387 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357962506220490\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8W70E57GH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2871\"}'\'' -e'"" [2025-08-22 15:57:06][357962506220490][4791 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_67e19669-00f1-4fd8-bea3-d60888385e86","id":"QR_67e19669-00f1-4fd8-bea3-d60888385e86","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:57:06][357962506220490][4947 ms][DEBUG] proc_open done in 4561 ms; code=255; res.len=3152 [2025-08-22 15:57:06][357962506220490][4948 ms][DEBUG] END runCmdUntilRes#1 in 4561 ms [2025-08-22 15:57:06][357962506220490][4948 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:57:07][352879320237101][1 ms][INFO] === Request start === [2025-08-22 15:57:07][352879320237101][2 ms][DEBUG] START check_scloud [2025-08-22 15:57:07][352879320237101][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:57:07][352879320237101][244 ms][DEBUG] SU: done in 242 ms; outu0_a118 27311 9964 24721120 241000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:57:07][352879320237101][244 ms][DEBUG] targetPkg: running [2025-08-22 15:57:07][352879320237101][244 ms][DEBUG] END check_scloud in 243 ms [2025-08-22 15:57:07][352879320237101][244 ms][DEBUG] START check_boot_completed [2025-08-22 15:57:07][352879320237101][244 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:57:07][352879320237101][275 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 15:57:07][352879320237101][275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:57:07][352879320237101][322 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 15:57:07][352879320237101][323 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 15:57:07][352879320237101][323 ms][DEBUG] rawBody.length=1161 [2025-08-22 15:57:07][352879320237101][323 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879320237101\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW70CET9X\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-08-22 15:57:07][352879320237101][323 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:57:07][352879320237101][323 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879320237101\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW70CET9X\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-08-22 15:57:11][352879320237101][4118 ms][DEBUG] proc_open done in 3795 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 15:57:11][352879320237101][4118 ms][DEBUG] END runCmdUntilRes#1 in 3795 ms [2025-08-22 15:57:11][352879320237101][4118 ms][WARN] Detected error: Process with pid 27311 either refused to load frida-agent, or terminated during injection [2025-08-22 15:57:11][352879320237101][4118 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 15:57:11][352879320237101][4275 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 15:57:11][352879320237101][4275 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 15:57:11][352879320237101][4275 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 15:57:11][352879320237101][4446 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 15:57:11][352879320237101][4447 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 15:57:12][352879320237101][4588 ms][DEBUG] SU: done in 142 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 15:57:14][352879320237101][6602 ms][DEBUG] START check_boot_completed [2025-08-22 15:57:14][352879320237101][6602 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:57:14][352879320237101][6649 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 15:57:14][352879320237101][6649 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:57:14][352879320237101][6727 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 15:57:14][352879320237101][6727 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 15:57:17][352879320237101][9742 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 15:57:17][352879320237101][9742 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879320237101\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCW70CET9X\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5774\"}'\'' -e'"" [2025-08-22 15:57:21][352879320237101][13616 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2eb6da2c-239e-407c-a7eb-92bcc5dde946","id":"QR_2eb6da2c-239e-407c-a7eb-92bcc5dde946","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:57:21][352879320237101][13772 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=3152 [2025-08-22 15:57:21][352879320237101][13772 ms][DEBUG] END runCmdUntilRes#2 in 4030 ms [2025-08-22 15:57:21][352879320237101][13772 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 15:57:47][350362204000236][0 ms][INFO] === Request start === [2025-08-22 15:57:47][350362204000236][1 ms][DEBUG] START check_scloud [2025-08-22 15:57:47][350362204000236][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 15:57:48][350362204000236][270 ms][DEBUG] SU: done in 268 ms; outu0_a118 28602 9964 23426320 126872 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 15:57:48][350362204000236][270 ms][DEBUG] targetPkg: running [2025-08-22 15:57:48][350362204000236][270 ms][DEBUG] END check_scloud in 269 ms [2025-08-22 15:57:48][350362204000236][270 ms][DEBUG] START check_boot_completed [2025-08-22 15:57:48][350362204000236][270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 15:57:48][350362204000236][316 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 15:57:48][350362204000236][316 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 15:57:48][350362204000236][379 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 15:57:48][350362204000236][379 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 15:57:48][350362204000236][379 ms][DEBUG] rawBody.length=1160 [2025-08-22 15:57:48][350362204000236][379 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362204000236\",\"model\":\"SM-G990B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW602L23P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6069\"}'\'' -e'"" [2025-08-22 15:57:48][350362204000236][379 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 15:57:48][350362204000236][379 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362204000236\",\"model\":\"SM-G990B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW602L23P\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"SKZ\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6069\"}'\'' -e'"" [2025-08-22 15:57:56][350362204000236][8830 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_86753cec-5d1a-400f-b1cb-15a22cc192a1","id":"QR_86753cec-5d1a-400f-b1cb-15a22cc192a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 15:57:56][350362204000236][8986 ms][DEBUG] proc_open done in 8607 ms; code=255; res.len=3152 [2025-08-22 15:57:56][350362204000236][8986 ms][DEBUG] END runCmdUntilRes#1 in 8607 ms [2025-08-22 15:57:56][350362204000236][8986 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:00:05][358184571234913][1 ms][INFO] === Request start === [2025-08-22 16:00:05][358184571234913][2 ms][DEBUG] START check_scloud [2025-08-22 16:00:05][358184571234913][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:00:05][358184571234913][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 28602 9964 23584708 137592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:00:05][358184571234913][303 ms][DEBUG] targetPkg: running [2025-08-22 16:00:05][358184571234913][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 16:00:05][358184571234913][303 ms][DEBUG] START check_boot_completed [2025-08-22 16:00:05][358184571234913][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:00:05][358184571234913][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:00:05][358184571234913][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:00:05][358184571234913][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:00:05][358184571234913][382 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:00:05][358184571234913][382 ms][DEBUG] START check_internet [2025-08-22 16:00:05][358184571234913][382 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:00:06][358184571234913][929 ms][DEBUG] SU: done in 548 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.619/201.619/201.619/0.000 ms\n [2025-08-22 16:00:06][358184571234913][929 ms][DEBUG] check_internet: online [2025-08-22 16:00:06][358184571234913][929 ms][DEBUG] END check_internet in 548 ms [2025-08-22 16:00:06][358184571234913][929 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:00:06][358184571234913][929 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184571234913\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0BHEAY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7628\"}'\'' -e'"" [2025-08-22 16:00:06][358184571234913][929 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:00:06][358184571234913][929 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358184571234913\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0BHEAY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MWD\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7628\"}'\'' -e'"" [2025-08-22 16:00:10][358184571234913][5161 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_a1b22899-3008-4375-a90d-b97689025b18","id":"QR_a1b22899-3008-4375-a90d-b97689025b18","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:00:10][358184571234913][5318 ms][DEBUG] proc_open done in 4388 ms; code=255; res.len=3152 [2025-08-22 16:00:10][358184571234913][5318 ms][DEBUG] END runCmdUntilRes#1 in 4388 ms [2025-08-22 16:00:10][358184571234913][5318 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:01:11][350323100416801][0 ms][INFO] === Request start === [2025-08-22 16:01:11][350323100416801][1 ms][DEBUG] START check_scloud [2025-08-22 16:01:11][350323100416801][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:01:12][350323100416801][290 ms][DEBUG] SU: done in 289 ms; outu0_a118 28602 9964 23716904 149408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:01:12][350323100416801][290 ms][DEBUG] targetPkg: running [2025-08-22 16:01:12][350323100416801][290 ms][DEBUG] END check_scloud in 289 ms [2025-08-22 16:01:12][350323100416801][290 ms][DEBUG] START check_boot_completed [2025-08-22 16:01:12][350323100416801][290 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:01:12][350323100416801][321 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:01:12][350323100416801][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:01:12][350323100416801][368 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:01:12][350323100416801][368 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:01:12][350323100416801][368 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:01:12][350323100416801][368 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350323100416801\",\"model\":\"SM-A256U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX115A57B\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3954\"}'\'' -e'"" [2025-08-22 16:01:12][350323100416801][368 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:01:12][350323100416801][368 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350323100416801\",\"model\":\"SM-A256U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX115A57B\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"BST\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3954\"}'\'' -e'"" [2025-08-22 16:01:17][350323100416801][5601 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e9d33632-a666-4137-a6b9-b60ba6767c1c","id":"QR_e9d33632-a666-4137-a6b9-b60ba6767c1c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:01:17][350323100416801][5757 ms][DEBUG] proc_open done in 5389 ms; code=255; res.len=3152 [2025-08-22 16:01:17][350323100416801][5757 ms][DEBUG] END runCmdUntilRes#1 in 5389 ms [2025-08-22 16:01:17][350323100416801][5757 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:05:41][357351211176512][1 ms][INFO] === Request start === [2025-08-22 16:05:41][357351211176512][2 ms][DEBUG] START check_scloud [2025-08-22 16:05:41][357351211176512][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:05:41][357351211176512][266 ms][DEBUG] SU: done in 264 ms; outu0_a118 28602 9964 23881196 160860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:05:41][357351211176512][266 ms][DEBUG] targetPkg: running [2025-08-22 16:05:41][357351211176512][266 ms][DEBUG] END check_scloud in 264 ms [2025-08-22 16:05:41][357351211176512][266 ms][DEBUG] START check_boot_completed [2025-08-22 16:05:41][357351211176512][266 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:05:41][357351211176512][297 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:05:41][357351211176512][297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:05:41][357351211176512][344 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:05:41][357351211176512][344 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:05:41][357351211176512][344 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:05:41][357351211176512][344 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357351211176512\",\"model\":\"SM-S721B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY3108ARF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8066\"}'\'' -e'"" [2025-08-22 16:05:41][357351211176512][344 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:05:41][357351211176512][344 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357351211176512\",\"model\":\"SM-S721B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCY3108ARF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUE\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8066\"}'\'' -e'"" [2025-08-22 16:05:46][357351211176512][4937 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cfcd03b4-6d95-4b7b-9923-ac81d1199691","id":"QR_cfcd03b4-6d95-4b7b-9923-ac81d1199691","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:05:46][357351211176512][5093 ms][DEBUG] proc_open done in 4749 ms; code=255; res.len=3152 [2025-08-22 16:05:46][357351211176512][5093 ms][DEBUG] END runCmdUntilRes#1 in 4749 ms [2025-08-22 16:05:46][357351211176512][5093 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:07:21][351184063270430][0 ms][INFO] === Request start === [2025-08-22 16:07:21][351184063270430][1 ms][DEBUG] START check_scloud [2025-08-22 16:07:21][351184063270430][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:07:22][351184063270430][303 ms][DEBUG] SU: done in 302 ms; outu0_a118 28602 9964 24043920 171960 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:07:22][351184063270430][304 ms][DEBUG] targetPkg: running [2025-08-22 16:07:22][351184063270430][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 16:07:22][351184063270430][304 ms][DEBUG] START check_boot_completed [2025-08-22 16:07:22][351184063270430][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:07:22][351184063270430][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:07:22][351184063270430][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:07:22][351184063270430][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 16:07:22][351184063270430][399 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 16:07:22][351184063270430][399 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:07:22][351184063270430][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184063270430\",\"model\":\"SM-S928U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX52VYHER\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7420\"}'\'' -e'"" [2025-08-22 16:07:22][351184063270430][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:07:22][351184063270430][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351184063270430\",\"model\":\"SM-S928U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX52VYHER\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC7420\"}'\'' -e'"" [2025-08-22 16:07:27][351184063270430][5708 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_372013b8-62ed-4943-8b0c-b1b7fd500818","id":"QR_372013b8-62ed-4943-8b0c-b1b7fd500818","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:07:27][351184063270430][5864 ms][DEBUG] proc_open done in 5465 ms; code=255; res.len=3152 [2025-08-22 16:07:27][351184063270430][5864 ms][DEBUG] END runCmdUntilRes#1 in 5465 ms [2025-08-22 16:07:27][351184063270430][5864 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:07:34][356007113339332][0 ms][INFO] === Request start === [2025-08-22 16:07:34][356007113339332][1 ms][DEBUG] START check_scloud [2025-08-22 16:07:34][356007113339332][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:07:35][356007113339332][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 28602 9964 24204952 183844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:07:35][356007113339332][309 ms][DEBUG] targetPkg: running [2025-08-22 16:07:35][356007113339332][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-22 16:07:35][356007113339332][309 ms][DEBUG] START check_boot_completed [2025-08-22 16:07:35][356007113339332][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:07:35][356007113339332][356 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:07:35][356007113339332][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:07:35][356007113339332][418 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:07:35][356007113339332][418 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:07:35][356007113339332][418 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:07:35][356007113339332][419 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007113339332\",\"model\":\"SM-G980F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N62Y9PWV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6577\"}'\'' -e'"" [2025-08-22 16:07:35][356007113339332][419 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:07:35][356007113339332][419 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356007113339332\",\"model\":\"SM-G980F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8N62Y9PWV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6577\"}'\'' -e'"" [2025-08-22 16:07:39][356007113339332][4699 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e569db86-a35c-46f0-b800-b2bd30320110","id":"QR_e569db86-a35c-46f0-b800-b2bd30320110","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:07:39][356007113339332][4855 ms][DEBUG] proc_open done in 4436 ms; code=255; res.len=3152 [2025-08-22 16:07:39][356007113339332][4855 ms][DEBUG] END runCmdUntilRes#1 in 4436 ms [2025-08-22 16:07:39][356007113339332][4855 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:08:49][352549937232650][1 ms][INFO] === Request start === [2025-08-22 16:08:49][352549937232650][2 ms][DEBUG] START check_scloud [2025-08-22 16:08:49][352549937232650][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:08:49][352549937232650][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 28602 9964 24306520 195032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:08:49][352549937232650][306 ms][DEBUG] targetPkg: running [2025-08-22 16:08:49][352549937232650][306 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 16:08:49][352549937232650][306 ms][DEBUG] START check_boot_completed [2025-08-22 16:08:49][352549937232650][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:08:49][352549937232650][353 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:08:49][352549937232650][353 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:08:49][352549937232650][415 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:08:49][352549937232650][415 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:08:49][352549937232650][415 ms][DEBUG] START check_internet [2025-08-22 16:08:49][352549937232650][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:08:50][352549937232650][946 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.827/201.827/201.827/0.000 ms\n [2025-08-22 16:08:50][352549937232650][946 ms][DEBUG] check_internet: online [2025-08-22 16:08:50][352549937232650][946 ms][DEBUG] END check_internet in 531 ms [2025-08-22 16:08:50][352549937232650][946 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:08:50][352549937232650][946 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549937232650\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X90EEQLN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6638\"}'\'' -e'"" [2025-08-22 16:08:50][352549937232650][946 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:08:50][352549937232650][946 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352549937232650\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8X90EEQLN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6638\"}'\'' -e'"" [2025-08-22 16:08:54][352549937232650][5367 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_41a19522-9fbd-465f-8e6e-1ed2a3c67f49","id":"QR_41a19522-9fbd-465f-8e6e-1ed2a3c67f49","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:08:54][352549937232650][5523 ms][DEBUG] proc_open done in 4576 ms; code=255; res.len=3152 [2025-08-22 16:08:54][352549937232650][5523 ms][DEBUG] END runCmdUntilRes#1 in 4577 ms [2025-08-22 16:08:54][352549937232650][5523 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:09:06][351828119496171][0 ms][INFO] === Request start === [2025-08-22 16:09:06][351828119496171][1 ms][DEBUG] START check_scloud [2025-08-22 16:09:06][351828119496171][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:09:06][351828119496171][289 ms][DEBUG] SU: done in 288 ms; outu0_a118 28602 9964 24467552 207024 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:09:06][351828119496171][289 ms][DEBUG] targetPkg: running [2025-08-22 16:09:06][351828119496171][289 ms][DEBUG] END check_scloud in 288 ms [2025-08-22 16:09:06][351828119496171][289 ms][DEBUG] START check_boot_completed [2025-08-22 16:09:06][351828119496171][289 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:09:06][351828119496171][334 ms][DEBUG] ADB: done in 45 ms; out [2025-08-22 16:09:06][351828119496171][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:09:06][351828119496171][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:09:06][351828119496171][397 ms][DEBUG] END check_boot_completed in 107 ms [2025-08-22 16:09:06][351828119496171][397 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:09:06][351828119496171][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828119496171\",\"model\":\"SM-G988B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CN81KLLJF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8601\"}'\'' -e'"" [2025-08-22 16:09:06][351828119496171][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:09:06][351828119496171][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351828119496171\",\"model\":\"SM-G988B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CN81KLLJF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC8601\"}'\'' -e'"" [2025-08-22 16:09:10][351828119496171][4520 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_93c7852a-9aee-4199-91af-9a9771a88984","id":"QR_93c7852a-9aee-4199-91af-9a9771a88984","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:09:11][351828119496171][4677 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 16:09:11][351828119496171][4677 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 16:09:11][351828119496171][4677 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:11:12][351070610629865][1 ms][INFO] === Request start === [2025-08-22 16:11:12][351070610629865][2 ms][DEBUG] START check_scloud [2025-08-22 16:11:12][351070610629865][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:11:12][351070610629865][305 ms][DEBUG] SU: done in 303 ms; outu0_a118 28602 9964 24631612 217888 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:11:12][351070610629865][305 ms][DEBUG] targetPkg: running [2025-08-22 16:11:12][351070610629865][305 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 16:11:12][351070610629865][305 ms][DEBUG] START check_boot_completed [2025-08-22 16:11:12][351070610629865][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:11:12][351070610629865][351 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:11:12][351070610629865][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:11:12][351070610629865][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:11:12][351070610629865][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:11:12][351070610629865][399 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:11:12][351070610629865][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351070610629865\",\"model\":\"SM-F721U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT809T26R\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1660\"}'\'' -e'"" [2025-08-22 16:11:12][351070610629865][399 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:11:12][351070610629865][399 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351070610629865\",\"model\":\"SM-F721U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT809T26R\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1660\"}'\'' -e'"" [2025-08-22 16:11:17][351070610629865][5819 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d3edfe76-1763-4367-a2f4-69b7a5029ee5","id":"QR_d3edfe76-1763-4367-a2f4-69b7a5029ee5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:11:18][351070610629865][5975 ms][DEBUG] proc_open done in 5576 ms; code=255; res.len=3152 [2025-08-22 16:11:18][351070610629865][5975 ms][DEBUG] END runCmdUntilRes#1 in 5576 ms [2025-08-22 16:11:18][351070610629865][5975 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:11:26][357967971878508][0 ms][INFO] === Request start === [2025-08-22 16:11:26][357967971878508][1 ms][DEBUG] START check_scloud [2025-08-22 16:11:26][357967971878508][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:11:27][357967971878508][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 28602 9964 24816068 229980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:11:27][357967971878508][296 ms][DEBUG] targetPkg: running [2025-08-22 16:11:27][357967971878508][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-22 16:11:27][357967971878508][296 ms][DEBUG] START check_boot_completed [2025-08-22 16:11:27][357967971878508][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:11:27][357967971878508][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:11:27][357967971878508][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:11:27][357967971878508][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:11:27][357967971878508][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:11:27][357967971878508][405 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:11:27][357967971878508][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967971878508\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y10AKB1J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9468\"}'\'' -e'"" [2025-08-22 16:11:27][357967971878508][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:11:27][357967971878508][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967971878508\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y10AKB1J\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9468\"}'\'' -e'"" [2025-08-22 16:11:31][357967971878508][4873 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_65709641-a485-4724-8b77-96a9fa1af66f","id":"QR_65709641-a485-4724-8b77-96a9fa1af66f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:11:31][357967971878508][5029 ms][DEBUG] proc_open done in 4624 ms; code=255; res.len=3152 [2025-08-22 16:11:31][357967971878508][5029 ms][DEBUG] END runCmdUntilRes#1 in 4624 ms [2025-08-22 16:11:31][357967971878508][5029 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:13:42][352600226798552][1 ms][INFO] === Request start === [2025-08-22 16:13:42][352600226798552][2 ms][DEBUG] START check_scloud [2025-08-22 16:13:42][352600226798552][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:13:43][352600226798552][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 28602 9964 24958408 241108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:13:43][352600226798552][302 ms][DEBUG] targetPkg: running [2025-08-22 16:13:43][352600226798552][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 16:13:43][352600226798552][302 ms][DEBUG] START check_boot_completed [2025-08-22 16:13:43][352600226798552][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:13:43][352600226798552][333 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:13:43][352600226798552][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:13:43][352600226798552][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:13:43][352600226798552][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:13:43][352600226798552][381 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:13:43][352600226798552][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226798552\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y603ATHT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2388\"}'\'' -e'"" [2025-08-22 16:13:43][352600226798552][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:13:43][352600226798552][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226798552\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y603ATHT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2388\"}'\'' -e'"" [2025-08-22 16:13:47][352600226798552][4161 ms][DEBUG] proc_open done in 3780 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 16:13:47][352600226798552][4161 ms][DEBUG] END runCmdUntilRes#1 in 3780 ms [2025-08-22 16:13:47][352600226798552][4161 ms][WARN] Detected error: Process with pid 28602 either refused to load frida-agent, or terminated during injection [2025-08-22 16:13:47][352600226798552][4161 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 16:13:47][352600226798552][4317 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 16:13:47][352600226798552][4317 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 16:13:47][352600226798552][4317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:13:47][352600226798552][4442 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:13:47][352600226798552][4442 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:13:47][352600226798552][4598 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:13:49][352600226798552][6613 ms][DEBUG] START check_boot_completed [2025-08-22 16:13:49][352600226798552][6613 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:13:49][352600226798552][6660 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:13:49][352600226798552][6660 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:13:49][352600226798552][6707 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:13:49][352600226798552][6707 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:13:52][350805650271412][1 ms][INFO] === Request start === [2025-08-22 16:13:52][352600226798552][9722 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 16:13:52][352600226798552][9722 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352600226798552\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y603ATHT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2388\"}'\'' -e'"" [2025-08-22 16:13:56][352600226798552][13846 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_53ca192a-c703-48ed-a96c-412aaa12a08e","id":"QR_53ca192a-c703-48ed-a96c-412aaa12a08e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:13:56][352600226798552][14002 ms][DEBUG] proc_open done in 4280 ms; code=255; res.len=3152 [2025-08-22 16:13:56][352600226798552][14002 ms][DEBUG] END runCmdUntilRes#2 in 4280 ms [2025-08-22 16:13:56][352600226798552][14002 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:13:57][350805650271412][5078 ms][DEBUG] START check_scloud [2025-08-22 16:13:57][350805650271412][5078 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:13:57][350805650271412][5328 ms][DEBUG] SU: done in 250 ms; outu0_a118 30192 9964 23448092 123948 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:13:57][350805650271412][5328 ms][DEBUG] targetPkg: running [2025-08-22 16:13:57][350805650271412][5328 ms][DEBUG] END check_scloud in 250 ms [2025-08-22 16:13:57][350805650271412][5329 ms][DEBUG] START check_boot_completed [2025-08-22 16:13:57][350805650271412][5329 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:13:57][350805650271412][5375 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:13:57][350805650271412][5375 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:13:57][350805650271412][5438 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:13:57][350805650271412][5438 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:13:57][350805650271412][5438 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:13:57][350805650271412][5438 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650271412\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8WA05982P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6074\"}'\'' -e'"" [2025-08-22 16:13:57][350805650271412][5438 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:13:57][350805650271412][5438 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350805650271412\",\"model\":\"SM-E135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8WA05982P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6074\"}'\'' -e'"" [2025-08-22 16:14:01][350805650271412][9577 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9ca2475f-56b2-4d3d-b0cb-f698f2d23eb8","id":"QR_9ca2475f-56b2-4d3d-b0cb-f698f2d23eb8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:14:02][350805650271412][9733 ms][DEBUG] proc_open done in 4295 ms; code=255; res.len=3152 [2025-08-22 16:14:02][350805650271412][9733 ms][DEBUG] END runCmdUntilRes#1 in 4295 ms [2025-08-22 16:14:02][350805650271412][9733 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:14:33][350220439390097][0 ms][INFO] === Request start === [2025-08-22 16:14:33][350220439390097][1 ms][DEBUG] START check_scloud [2025-08-22 16:14:33][350220439390097][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:14:34][350220439390097][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 30192 9964 23533076 137444 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:14:34][350220439390097][304 ms][DEBUG] targetPkg: running [2025-08-22 16:14:34][350220439390097][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 16:14:34][350220439390097][304 ms][DEBUG] START check_boot_completed [2025-08-22 16:14:34][350220439390097][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:14:34][350220439390097][351 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:14:34][350220439390097][351 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:14:34][350220439390097][413 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:14:34][350220439390097][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:14:34][350220439390097][414 ms][DEBUG] START check_internet [2025-08-22 16:14:34][350220439390097][414 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:14:34][350220439390097][945 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.630/202.630/202.630/0.000 ms\n [2025-08-22 16:14:34][350220439390097][945 ms][DEBUG] check_internet: online [2025-08-22 16:14:34][350220439390097][945 ms][DEBUG] END check_internet in 531 ms [2025-08-22 16:14:34][350220439390097][945 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:14:34][350220439390097][945 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350220439390097\",\"model\":\"SM-A515F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8NC19FMFL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9972\"}'\'' -e'"" [2025-08-22 16:14:34][350220439390097][945 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:14:34][350220439390097][945 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350220439390097\",\"model\":\"SM-A515F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8NC19FMFL\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ACR\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9972\"}'\'' -e'"" [2025-08-22 16:14:38][350220439390097][4959 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9c1f0c4d-157a-4b0e-8e3d-7d61fe34fcf6","id":"QR_9c1f0c4d-157a-4b0e-8e3d-7d61fe34fcf6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:14:38][350220439390097][5115 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3152 [2025-08-22 16:14:38][350220439390097][5115 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-22 16:14:38][350220439390097][5115 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:15:07][356923588974389][0 ms][INFO] === Request start === [2025-08-22 16:15:07][356923588974389][1 ms][DEBUG] START check_scloud [2025-08-22 16:15:07][356923588974389][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:15:07][356923588974389][256 ms][DEBUG] SU: done in 254 ms; outu0_a118 30192 9964 23665336 149100 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:15:07][356923588974389][256 ms][DEBUG] targetPkg: running [2025-08-22 16:15:07][356923588974389][256 ms][DEBUG] END check_scloud in 255 ms [2025-08-22 16:15:07][356923588974389][256 ms][DEBUG] START check_boot_completed [2025-08-22 16:15:07][356923588974389][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:15:07][356923588974389][302 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:15:07][356923588974389][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:15:07][356923588974389][365 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:15:07][356923588974389][365 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:15:07][356923588974389][365 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:15:07][356923588974389][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923588974389\",\"model\":\"SM-A156B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX51YD82P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5065\"}'\'' -e'"" [2025-08-22 16:15:07][356923588974389][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:15:07][356923588974389][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356923588974389\",\"model\":\"SM-A156B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX51YD82P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5065\"}'\'' -e'"" [2025-08-22 16:15:12][356923588974389][4911 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_70d66030-a282-4012-9015-7f5728d992d3","id":"QR_70d66030-a282-4012-9015-7f5728d992d3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:15:12][356923588974389][5067 ms][DEBUG] proc_open done in 4701 ms; code=255; res.len=3152 [2025-08-22 16:15:12][356923588974389][5067 ms][DEBUG] END runCmdUntilRes#1 in 4702 ms [2025-08-22 16:15:12][356923588974389][5067 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:17:06][350013881066970][1 ms][INFO] === Request start === [2025-08-22 16:17:06][350013881066970][2 ms][DEBUG] START check_scloud [2025-08-22 16:17:06][350013881066970][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:17:06][350013881066970][312 ms][DEBUG] SU: done in 310 ms; out [2025-08-22 16:17:06][350013881066970][312 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:17:06][350013881066970][312 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:17:07][350013881066970][453 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 16:17:07][350013881066970][453 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:17:07][350013881066970][640 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:17:09][350013881066970][2655 ms][DEBUG] END check_scloud in 2654 ms [2025-08-22 16:17:09][350013881066970][2655 ms][DEBUG] START check_boot_completed [2025-08-22 16:17:09][350013881066970][2655 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:17:09][350013881066970][2702 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:17:09][350013881066970][2702 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:17:09][350013881066970][2749 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:17:09][350013881066970][2749 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:17:09][350013881066970][2749 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:17:09][350013881066970][2749 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881066970\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TA042Z5L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5165\"}'\'' -e'"" [2025-08-22 16:17:09][350013881066970][2750 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:17:09][350013881066970][2750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350013881066970\",\"model\":\"SM-A135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58TA042Z5L\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"XXV\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5165\"}'\'' -e'"" [2025-08-22 16:17:14][350013881066970][7717 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_63a00a08-b9ae-4d33-8936-a8499e101775","id":"QR_63a00a08-b9ae-4d33-8936-a8499e101775","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:17:14][350013881066970][7873 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3152 [2025-08-22 16:17:14][350013881066970][7873 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-08-22 16:17:14][350013881066970][7873 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:19:52][353684145466706][1 ms][INFO] === Request start === [2025-08-22 16:19:52][353684145466706][2 ms][DEBUG] START check_scloud [2025-08-22 16:19:52][353684145466706][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:19:52][353684145466706][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 8635 30738 23766152 126492 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:19:52][353684145466706][313 ms][DEBUG] targetPkg: running [2025-08-22 16:19:52][353684145466706][313 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 16:19:52][353684145466706][313 ms][DEBUG] START check_boot_completed [2025-08-22 16:19:52][353684145466706][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:19:52][353684145466706][344 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:19:52][353684145466706][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:19:52][353684145466706][391 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:19:52][353684145466706][391 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:19:52][353684145466706][391 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:19:52][353684145466706][391 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145466706\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y618P1EW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3522\"}'\'' -e'"" [2025-08-22 16:19:52][353684145466706][391 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:19:52][353684145466706][391 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684145466706\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y618P1EW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3522\"}'\'' -e'"" [2025-08-22 16:19:56][353684145466706][4578 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0c4fad91-10cc-44d2-aba5-f0a08c6d4533","id":"QR_0c4fad91-10cc-44d2-aba5-f0a08c6d4533","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:19:56][353684145466706][4734 ms][DEBUG] proc_open done in 4343 ms; code=255; res.len=3152 [2025-08-22 16:19:56][353684145466706][4734 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-22 16:19:56][353684145466706][4734 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:21:06][352375452805245][0 ms][INFO] === Request start === [2025-08-22 16:21:06][352375452805245][1 ms][DEBUG] START check_scloud [2025-08-22 16:21:06][352375452805245][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:21:06][352375452805245][271 ms][DEBUG] SU: done in 270 ms; outu0_a118 8635 30738 23896236 137480 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:21:06][352375452805245][271 ms][DEBUG] targetPkg: running [2025-08-22 16:21:06][352375452805245][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-22 16:21:06][352375452805245][271 ms][DEBUG] START check_boot_completed [2025-08-22 16:21:06][352375452805245][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:21:06][352375452805245][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:21:06][352375452805245][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:21:06][352375452805245][365 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:21:06][352375452805245][365 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:21:06][352375452805245][365 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:21:06][352375452805245][365 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375452805245\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW611V8CT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7043\"}'\'' -e'"" [2025-08-22 16:21:06][352375452805245][365 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:21:06][352375452805245][365 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352375452805245\",\"model\":\"SM-A546B\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCW611V8CT\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7043\"}'\'' -e'"" [2025-08-22 16:21:10][352375452805245][4536 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bf1862a6-0925-4c7c-aa93-101ce7ebded2","id":"QR_bf1862a6-0925-4c7c-aa93-101ce7ebded2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:21:11][352375452805245][4692 ms][DEBUG] proc_open done in 4327 ms; code=255; res.len=3152 [2025-08-22 16:21:11][352375452805245][4692 ms][DEBUG] END runCmdUntilRes#1 in 4327 ms [2025-08-22 16:21:11][352375452805245][4692 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:22:05][351477979298382][1 ms][INFO] === Request start === [2025-08-22 16:22:05][351477979298382][2 ms][DEBUG] START check_scloud [2025-08-22 16:22:05][351477979298382][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:22:06][351477979298382][294 ms][DEBUG] SU: done in 293 ms; outu0_a118 8635 30738 24056108 149736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:22:06][351477979298382][295 ms][DEBUG] targetPkg: running [2025-08-22 16:22:06][351477979298382][295 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 16:22:06][351477979298382][295 ms][DEBUG] START check_boot_completed [2025-08-22 16:22:06][351477979298382][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:22:06][351477979298382][341 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:22:06][351477979298382][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:22:06][351477979298382][404 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:22:06][351477979298382][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:22:06][351477979298382][404 ms][DEBUG] START check_internet [2025-08-22 16:22:06][351477979298382][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:22:06][351477979298382][873 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.924/201.924/201.924/0.000 ms\n [2025-08-22 16:22:06][351477979298382][874 ms][DEBUG] check_internet: online [2025-08-22 16:22:06][351477979298382][874 ms][DEBUG] END check_internet in 470 ms [2025-08-22 16:22:06][351477979298382][874 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:22:06][351477979298382][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979298382\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC0AF2NJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1923\"}'\'' -e'"" [2025-08-22 16:22:06][351477979298382][874 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:22:06][351477979298382][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351477979298382\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XC0AF2NJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1923\"}'\'' -e'"" [2025-08-22 16:22:11][351477979298382][5012 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_631c6198-3575-42cb-be68-01a62ca017d6","id":"QR_631c6198-3575-42cb-be68-01a62ca017d6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:22:11][351477979298382][5168 ms][DEBUG] proc_open done in 4294 ms; code=255; res.len=3152 [2025-08-22 16:22:11][351477979298382][5168 ms][DEBUG] END runCmdUntilRes#1 in 4294 ms [2025-08-22 16:22:11][351477979298382][5168 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:22:20][350545264391509][0 ms][INFO] === Request start === [2025-08-22 16:22:20][350545264391509][1 ms][DEBUG] START check_scloud [2025-08-22 16:22:20][350545264391509][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:22:21][350545264391509][295 ms][DEBUG] SU: done in 294 ms; outu0_a118 8635 30738 24231220 159932 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:22:21][350545264391509][295 ms][DEBUG] targetPkg: running [2025-08-22 16:22:21][350545264391509][295 ms][DEBUG] END check_scloud in 294 ms [2025-08-22 16:22:21][350545264391509][296 ms][DEBUG] START check_boot_completed [2025-08-22 16:22:21][350545264391509][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:22:21][350545264391509][342 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:22:21][350545264391509][342 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:22:21][350545264391509][404 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:22:21][350545264391509][404 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:22:21][350545264391509][404 ms][DEBUG] START check_internet [2025-08-22 16:22:21][350545264391509][404 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:22:21][350545264391509][779 ms][DEBUG] SU: done in 375 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=261 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 261.190/261.190/261.190/0.000 ms\n [2025-08-22 16:22:21][350545264391509][779 ms][DEBUG] check_internet: online [2025-08-22 16:22:21][350545264391509][780 ms][DEBUG] END check_internet in 375 ms [2025-08-22 16:22:21][350545264391509][780 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:22:21][350545264391509][780 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545264391509\",\"model\":\"SM-S926U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX22XJDBN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4222\"}'\'' -e'"" [2025-08-22 16:22:21][350545264391509][780 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:22:21][350545264391509][780 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350545264391509\",\"model\":\"SM-S926U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX22XJDBN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"CHA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4222\"}'\'' -e'"" [2025-08-22 16:22:27][350545264391509][6340 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f178da53-fdfd-4d9b-bc09-8b98a93c391e","id":"QR_f178da53-fdfd-4d9b-bc09-8b98a93c391e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:22:27][350545264391509][6496 ms][DEBUG] proc_open done in 5717 ms; code=255; res.len=3152 [2025-08-22 16:22:27][350545264391509][6496 ms][DEBUG] END runCmdUntilRes#1 in 5717 ms [2025-08-22 16:22:27][350545264391509][6497 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:24:08][350547665434920][1 ms][INFO] === Request start === [2025-08-22 16:24:08][350547665434920][2 ms][DEBUG] START check_scloud [2025-08-22 16:24:08][350547665434920][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:24:08][350547665434920][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 8635 30738 24360364 171744 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:24:08][350547665434920][313 ms][DEBUG] targetPkg: running [2025-08-22 16:24:08][350547665434920][313 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 16:24:08][350547665434920][313 ms][DEBUG] START check_boot_completed [2025-08-22 16:24:08][350547665434920][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:24:08][350547665434920][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:24:08][350547665434920][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:24:08][350547665434920][406 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:24:08][350547665434920][406 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:24:08][350547665434920][406 ms][DEBUG] START check_internet [2025-08-22 16:24:08][350547665434920][406 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:24:09][350547665434920][750 ms][DEBUG] SU: done in 344 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=243 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 243.298/243.298/243.298/0.000 ms\n [2025-08-22 16:24:09][350547665434920][751 ms][DEBUG] check_internet: online [2025-08-22 16:24:09][350547665434920][751 ms][DEBUG] END check_internet in 345 ms [2025-08-22 16:24:09][350547665434920][751 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:24:09][350547665434920][751 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547665434920\",\"model\":\"SM-A225M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8TB02XFBH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6139\"}'\'' -e'"" [2025-08-22 16:24:09][350547665434920][751 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:24:09][350547665434920][751 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547665434920\",\"model\":\"SM-A225M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8TB02XFBH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC6139\"}'\'' -e'"" [2025-08-22 16:24:16][350547665434920][7545 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5dcaf587-50b5-466e-8a4f-13d86677d2fc","id":"QR_5dcaf587-50b5-466e-8a4f-13d86677d2fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:24:16][350547665434920][7701 ms][DEBUG] proc_open done in 6950 ms; code=255; res.len=3152 [2025-08-22 16:24:16][350547665434920][7701 ms][DEBUG] END runCmdUntilRes#1 in 6950 ms [2025-08-22 16:24:16][350547665434920][7701 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:25:07][350518491732530][0 ms][INFO] === Request start === [2025-08-22 16:25:07][350518491732530][1 ms][DEBUG] START check_scloud [2025-08-22 16:25:07][350518491732530][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:25:08][350518491732530][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 8635 30738 24465936 182044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:25:08][350518491732530][315 ms][DEBUG] targetPkg: running [2025-08-22 16:25:08][350518491732530][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 16:25:08][350518491732530][315 ms][DEBUG] START check_boot_completed [2025-08-22 16:25:08][350518491732530][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:25:08][350518491732530][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:25:08][350518491732530][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:25:08][350518491732530][424 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:25:08][350518491732530][424 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:25:08][350518491732530][424 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:25:08][350518491732530][424 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518491732530\",\"model\":\"SM-S928B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX1072TLL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9229\"}'\'' -e'"" [2025-08-22 16:25:08][350518491732530][424 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:25:08][350518491732530][424 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350518491732530\",\"model\":\"SM-S928B\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CX1072TLL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9229\"}'\'' -e'"" [2025-08-22 16:25:13][350518491732530][5673 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c5cc1465-8db2-4218-921c-cb47117f8325","id":"QR_c5cc1465-8db2-4218-921c-cb47117f8325","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:25:13][350518491732530][5829 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3152 [2025-08-22 16:25:13][350518491732530][5829 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-08-22 16:25:13][350518491732530][5829 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:26:32][350287314852384][1 ms][INFO] === Request start === [2025-08-22 16:26:32][350287314852384][2 ms][DEBUG] START check_scloud [2025-08-22 16:26:32][350287314852384][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:26:32][350287314852384][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 8635 30738 24631028 193980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:26:32][350287314852384][301 ms][DEBUG] targetPkg: running [2025-08-22 16:26:32][350287314852384][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 16:26:32][350287314852384][301 ms][DEBUG] START check_boot_completed [2025-08-22 16:26:32][350287314852384][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:26:32][350287314852384][332 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:26:32][350287314852384][332 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:26:32][350287314852384][379 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:26:32][350287314852384][379 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:26:32][350287314852384][379 ms][DEBUG] START check_internet [2025-08-22 16:26:32][350287314852384][379 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:26:32][350287314852384][863 ms][DEBUG] SU: done in 484 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.853/200.853/200.853/0.000 ms\n [2025-08-22 16:26:32][350287314852384][864 ms][DEBUG] check_internet: online [2025-08-22 16:26:32][350287314852384][864 ms][DEBUG] END check_internet in 484 ms [2025-08-22 16:26:32][350287314852384][864 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:26:32][350287314852384][864 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287314852384\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0NG4NH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1131\"}'\'' -e'"" [2025-08-22 16:26:32][350287314852384][864 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:26:32][350287314852384][864 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287314852384\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0NG4NH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1131\"}'\'' -e'"" [2025-08-22 16:26:36][350287314852384][4706 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:26:36][350287314852384][4862 ms][DEBUG] proc_open done in 3998 ms; code=255; res.len=107 [2025-08-22 16:26:36][350287314852384][4862 ms][DEBUG] END runCmdUntilRes#1 in 3999 ms [2025-08-22 16:26:36][350287314852384][4862 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:26:37][][0 ms][INFO] === Request start === [2025-08-22 16:26:37][][1 ms][DEBUG] START check_scloud [2025-08-22 16:26:37][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:26:37][][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 8635 30738 24802300 204996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:26:37][][309 ms][DEBUG] targetPkg: running [2025-08-22 16:26:37][][309 ms][DEBUG] END check_scloud in 308 ms [2025-08-22 16:26:37][][309 ms][DEBUG] START check_boot_completed [2025-08-22 16:26:37][][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:26:37][][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:26:37][][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:26:37][][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:26:37][][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:26:37][][402 ms][DEBUG] START check_internet [2025-08-22 16:26:37][][402 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:26:37][][652 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=146 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 146.289/146.289/146.289/0.000 ms\n [2025-08-22 16:26:37][][652 ms][DEBUG] check_internet: online [2025-08-22 16:26:37][][652 ms][DEBUG] END check_internet in 250 ms [2025-08-22 16:26:37][][652 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:26:37][][652 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0NG4NH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8343\"}'\'' -e'"" [2025-08-22 16:26:37][][652 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:26:37][][652 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0NG4NH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8343\"}'\'' -e'"" [2025-08-22 16:26:41][][4136 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:26:41][][4292 ms][DEBUG] proc_open done in 3640 ms; code=255; res.len=107 [2025-08-22 16:26:41][][4292 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-22 16:26:41][][4292 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:26:41][][0 ms][INFO] === Request start === [2025-08-22 16:26:41][][0 ms][DEBUG] START check_scloud [2025-08-22 16:26:41][][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:26:42][][301 ms][DEBUG] SU: done in 301 ms; outu0_a118 8635 30738 24922372 215828 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:26:42][][302 ms][DEBUG] targetPkg: running [2025-08-22 16:26:42][][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 16:26:42][][302 ms][DEBUG] START check_boot_completed [2025-08-22 16:26:42][][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:26:42][][348 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:26:42][][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:26:42][][411 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:26:42][][411 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:26:42][][411 ms][DEBUG] START check_internet [2025-08-22 16:26:42][][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:26:42][][692 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.772/142.772/142.772/0.000 ms\n [2025-08-22 16:26:42][][692 ms][DEBUG] check_internet: online [2025-08-22 16:26:42][][692 ms][DEBUG] END check_internet in 281 ms [2025-08-22 16:26:42][][692 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:26:42][][692 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0NG4NH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3976\"}'\'' -e'"" [2025-08-22 16:26:42][][692 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:26:42][][692 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8WC0NG4NH\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3976\"}'\'' -e'"" [2025-08-22 16:26:46][][4207 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:26:46][][4363 ms][DEBUG] proc_open done in 3670 ms; code=255; res.len=107 [2025-08-22 16:26:46][][4363 ms][DEBUG] END runCmdUntilRes#1 in 3670 ms [2025-08-22 16:26:46][][4363 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:26:48][350287314852384][0 ms][INFO] === Request start === [2025-08-22 16:26:48][350287314852384][1 ms][DEBUG] START check_scloud [2025-08-22 16:26:48][350287314852384][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:26:48][350287314852384][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 8635 30738 25046540 227664 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:26:48][350287314852384][315 ms][DEBUG] targetPkg: running [2025-08-22 16:26:48][350287314852384][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 16:26:48][350287314852384][315 ms][DEBUG] START check_boot_completed [2025-08-22 16:26:48][350287314852384][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:26:48][350287314852384][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:26:48][350287314852384][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:26:48][350287314852384][410 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 16:26:48][350287314852384][410 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 16:26:48][350287314852384][410 ms][DEBUG] START check_internet [2025-08-22 16:26:48][350287314852384][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:26:48][350287314852384][784 ms][DEBUG] SU: done in 373 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=252 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 252.929/252.929/252.929/0.000 ms\n [2025-08-22 16:26:48][350287314852384][784 ms][DEBUG] check_internet: online [2025-08-22 16:26:48][350287314852384][784 ms][DEBUG] END check_internet in 373 ms [2025-08-22 16:26:48][350287314852384][784 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:26:48][350287314852384][784 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287314852384\",\"model\":\"SM-A155F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8WC0NG4NH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3480\"}'\'' -e'"" [2025-08-22 16:26:48][350287314852384][784 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:26:48][350287314852384][784 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350287314852384\",\"model\":\"SM-A155F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8WC0NG4NH\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3480\"}'\'' -e'"" [2025-08-22 16:26:55][350287314852384][7157 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b142b892-8958-4e20-9587-4d6de62024f2","id":"QR_b142b892-8958-4e20-9587-4d6de62024f2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:26:55][350287314852384][7313 ms][DEBUG] proc_open done in 6529 ms; code=255; res.len=3152 [2025-08-22 16:26:55][350287314852384][7313 ms][DEBUG] END runCmdUntilRes#1 in 6529 ms [2025-08-22 16:26:55][350287314852384][7313 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:27:05][350804337078779][0 ms][INFO] === Request start === [2025-08-22 16:27:05][350804337078779][1 ms][DEBUG] START check_scloud [2025-08-22 16:27:05][350804337078779][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:27:05][350804337078779][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 8635 30738 25152168 238112 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:27:05][350804337078779][314 ms][DEBUG] targetPkg: running [2025-08-22 16:27:05][350804337078779][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 16:27:05][350804337078779][315 ms][DEBUG] START check_boot_completed [2025-08-22 16:27:05][350804337078779][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:27:05][350804337078779][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:27:05][350804337078779][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:27:05][350804337078779][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:27:05][350804337078779][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:27:05][350804337078779][408 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:27:05][350804337078779][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804337078779\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TB0ANB2P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8245\"}'\'' -e'"" [2025-08-22 16:27:05][350804337078779][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:27:05][350804337078779][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804337078779\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TB0ANB2P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8245\"}'\'' -e'"" [2025-08-22 16:27:09][350804337078779][4751 ms][DEBUG] proc_open done in 4343 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 16:27:09][350804337078779][4751 ms][DEBUG] END runCmdUntilRes#1 in 4343 ms [2025-08-22 16:27:09][350804337078779][4751 ms][WARN] Detected error: Process with pid 8635 either refused to load frida-agent, or terminated during injection [2025-08-22 16:27:09][350804337078779][4751 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 16:27:09][350804337078779][4907 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 16:27:09][350804337078779][4908 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 16:27:09][350804337078779][4908 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:27:10][350804337078779][5048 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 16:27:10][350804337078779][5048 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:27:10][350804337078779][5219 ms][DEBUG] SU: done in 172 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:27:12][350804337078779][7235 ms][DEBUG] START check_boot_completed [2025-08-22 16:27:12][350804337078779][7235 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:27:12][350804337078779][7282 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:27:12][350804337078779][7282 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:27:12][350804337078779][7328 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:27:12][350804337078779][7328 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:27:15][350804337078779][10343 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 16:27:15][350804337078779][10343 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804337078779\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TB0ANB2P\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8245\"}'\'' -e'"" [2025-08-22 16:27:19][350804337078779][14186 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ae953e52-073c-48b0-bfaa-0c418ab422ff","id":"QR_ae953e52-073c-48b0-bfaa-0c418ab422ff","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:27:19][350804337078779][14342 ms][DEBUG] proc_open done in 3999 ms; code=255; res.len=3152 [2025-08-22 16:27:19][350804337078779][14343 ms][DEBUG] END runCmdUntilRes#2 in 3999 ms [2025-08-22 16:27:19][350804337078779][14343 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:27:26][350938280334670][0 ms][INFO] === Request start === [2025-08-22 16:27:26][350938280334670][1 ms][DEBUG] START check_scloud [2025-08-22 16:27:26][350938280334670][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:27:26][350938280334670][253 ms][DEBUG] SU: done in 252 ms; outu0_a118 10405 30738 23821416 126572 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:27:26][350938280334670][253 ms][DEBUG] targetPkg: running [2025-08-22 16:27:26][350938280334670][253 ms][DEBUG] END check_scloud in 252 ms [2025-08-22 16:27:26][350938280334670][253 ms][DEBUG] START check_boot_completed [2025-08-22 16:27:26][350938280334670][253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:27:26][350938280334670][299 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:27:26][350938280334670][299 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:27:26][350938280334670][346 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:27:26][350938280334670][346 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:27:26][350938280334670][346 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:27:26][350938280334670][346 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280334670\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58XB0PMDAF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7744\"}'\'' -e'"" [2025-08-22 16:27:26][350938280334670][346 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:27:26][350938280334670][346 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350938280334670\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58XB0PMDAF\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7744\"}'\'' -e'"" [2025-08-22 16:27:30][350938280334670][4267 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_467c87ae-96c8-4dc2-a366-984d5518b0bc","id":"QR_467c87ae-96c8-4dc2-a366-984d5518b0bc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:27:30][350938280334670][4423 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3152 [2025-08-22 16:27:30][350938280334670][4423 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-22 16:27:30][350938280334670][4423 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:28:06][356414811263725][1 ms][INFO] === Request start === [2025-08-22 16:28:06][356414811263725][2 ms][DEBUG] START check_scloud [2025-08-22 16:28:06][356414811263725][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:28:06][356414811263725][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 10405 30738 23902100 137980 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:28:06][356414811263725][312 ms][DEBUG] targetPkg: running [2025-08-22 16:28:06][356414811263725][312 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 16:28:06][356414811263725][312 ms][DEBUG] START check_boot_completed [2025-08-22 16:28:06][356414811263725][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:28:06][356414811263725][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:28:06][356414811263725][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:28:06][356414811263725][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:28:06][356414811263725][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:28:06][356414811263725][421 ms][DEBUG] START check_internet [2025-08-22 16:28:06][356414811263725][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:28:07][356414811263725][781 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=244 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 244.915/244.915/244.915/0.000 ms\n [2025-08-22 16:28:07][356414811263725][781 ms][DEBUG] check_internet: online [2025-08-22 16:28:07][356414811263725][781 ms][DEBUG] END check_internet in 359 ms [2025-08-22 16:28:07][356414811263725][781 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:28:07][356414811263725][781 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811263725\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T912EHKN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8659\"}'\'' -e'"" [2025-08-22 16:28:07][356414811263725][781 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:28:07][356414811263725][781 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356414811263725\",\"model\":\"SM-M135F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8T912EHKN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"INS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8659\"}'\'' -e'"" [2025-08-22 16:28:11][356414811263725][4748 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9131ee2b-f316-40d5-a10a-e4f636950dca","id":"QR_9131ee2b-f316-40d5-a10a-e4f636950dca","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:28:11][356414811263725][4904 ms][DEBUG] proc_open done in 4123 ms; code=255; res.len=3152 [2025-08-22 16:28:11][356414811263725][4904 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-22 16:28:11][356414811263725][4905 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:28:17][350524541599267][1 ms][INFO] === Request start === [2025-08-22 16:28:17][350524541599267][2 ms][DEBUG] START check_scloud [2025-08-22 16:28:17][350524541599267][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:28:17][350524541599267][316 ms][DEBUG] SU: done in 314 ms; outu0_a118 10405 30738 24046620 149348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:28:17][350524541599267][316 ms][DEBUG] targetPkg: running [2025-08-22 16:28:17][350524541599267][316 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 16:28:17][350524541599267][316 ms][DEBUG] START check_boot_completed [2025-08-22 16:28:17][350524541599267][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:28:17][350524541599267][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:28:17][350524541599267][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:28:17][350524541599267][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:28:17][350524541599267][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:28:17][350524541599267][409 ms][DEBUG] START check_internet [2025-08-22 16:28:17][350524541599267][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:28:18][350524541599267][706 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=190 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 190.724/190.724/190.724/0.000 ms\n [2025-08-22 16:28:18][350524541599267][706 ms][DEBUG] check_internet: online [2025-08-22 16:28:18][350524541599267][706 ms][DEBUG] END check_internet in 297 ms [2025-08-22 16:28:18][350524541599267][706 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:28:18][350524541599267][707 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524541599267\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX90S3FQA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4891\"}'\'' -e'"" [2025-08-22 16:28:18][350524541599267][707 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:28:18][350524541599267][707 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350524541599267\",\"model\":\"SM-A356E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX90S3FQA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC4891\"}'\'' -e'"" [2025-08-22 16:28:21][350524541599267][4627 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_13d56726-e221-431e-a21e-4650fc33eb3d","id":"QR_13d56726-e221-431e-a21e-4650fc33eb3d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:28:22][350524541599267][4783 ms][DEBUG] proc_open done in 4076 ms; code=255; res.len=3152 [2025-08-22 16:28:22][350524541599267][4783 ms][DEBUG] END runCmdUntilRes#1 in 4077 ms [2025-08-22 16:28:22][350524541599267][4783 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:28:28][354314904426522][0 ms][INFO] === Request start === [2025-08-22 16:28:28][354314904426522][1 ms][DEBUG] START check_scloud [2025-08-22 16:28:28][354314904426522][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:28:28][354314904426522][282 ms][DEBUG] SU: done in 280 ms; outu0_a118 10405 30738 24172736 160328 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:28:28][354314904426522][282 ms][DEBUG] targetPkg: running [2025-08-22 16:28:28][354314904426522][282 ms][DEBUG] END check_scloud in 281 ms [2025-08-22 16:28:28][354314904426522][282 ms][DEBUG] START check_boot_completed [2025-08-22 16:28:28][354314904426522][282 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:28:28][354314904426522][311 ms][DEBUG] ADB: done in 29 ms; out [2025-08-22 16:28:28][354314904426522][311 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:28:28][354314904426522][374 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:28:28][354314904426522][374 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 16:28:28][354314904426522][374 ms][DEBUG] START check_internet [2025-08-22 16:28:28][354314904426522][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:28:29][354314904426522][688 ms][DEBUG] SU: done in 314 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.854/201.854/201.854/0.000 ms\n [2025-08-22 16:28:29][354314904426522][688 ms][DEBUG] check_internet: online [2025-08-22 16:28:29][354314904426522][688 ms][DEBUG] END check_internet in 314 ms [2025-08-22 16:28:29][354314904426522][688 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:28:29][354314904426522][688 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314904426522\",\"model\":\"SM-A245M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8WA04H15F\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8695\"}'\'' -e'"" [2025-08-22 16:28:29][354314904426522][688 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:28:29][354314904426522][688 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314904426522\",\"model\":\"SM-A245M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8WA04H15F\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC8695\"}'\'' -e'"" [2025-08-22 16:28:35][354314904426522][7075 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_92ee2846-3779-4727-89fc-a3b0ef98640d","id":"QR_92ee2846-3779-4727-89fc-a3b0ef98640d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:28:35][354314904426522][7231 ms][DEBUG] proc_open done in 6543 ms; code=255; res.len=3152 [2025-08-22 16:28:35][354314904426522][7231 ms][DEBUG] END runCmdUntilRes#1 in 6543 ms [2025-08-22 16:28:35][354314904426522][7231 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:31:09][351663701954851][1 ms][INFO] === Request start === [2025-08-22 16:31:09][351663701954851][2 ms][DEBUG] START check_scloud [2025-08-22 16:31:09][351663701954851][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:31:09][351663701954851][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 10405 30738 24299700 171588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:31:09][351663701954851][316 ms][DEBUG] targetPkg: running [2025-08-22 16:31:09][351663701954851][316 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 16:31:09][351663701954851][316 ms][DEBUG] START check_boot_completed [2025-08-22 16:31:09][351663701954851][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:31:09][351663701954851][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:31:09][351663701954851][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:31:09][351663701954851][456 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 16:31:09][351663701954851][456 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 16:31:09][351663701954851][456 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:31:09][351663701954851][456 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663701954851\",\"model\":\"SM-A047M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58W20DEFVA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9967\"}'\'' -e'"" [2025-08-22 16:31:09][351663701954851][456 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:31:09][351663701954851][456 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351663701954851\",\"model\":\"SM-A047M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58W20DEFVA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9967\"}'\'' -e'"" [2025-08-22 16:31:17][351663701954851][8251 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9831ae04-51ea-4a5f-9100-099459f389ee","id":"QR_9831ae04-51ea-4a5f-9100-099459f389ee","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:31:17][351663701954851][8407 ms][DEBUG] proc_open done in 7951 ms; code=255; res.len=3152 [2025-08-22 16:31:17][351663701954851][8407 ms][DEBUG] END runCmdUntilRes#1 in 7951 ms [2025-08-22 16:31:17][351663701954851][8407 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:33:06][352879326920387][1 ms][INFO] === Request start === [2025-08-22 16:33:06][352879326920387][2 ms][DEBUG] START check_scloud [2025-08-22 16:33:06][352879326920387][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:33:06][352879326920387][318 ms][DEBUG] SU: done in 316 ms; outu0_a118 10405 30738 24403352 183592 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:33:06][352879326920387][318 ms][DEBUG] targetPkg: running [2025-08-22 16:33:06][352879326920387][318 ms][DEBUG] END check_scloud in 316 ms [2025-08-22 16:33:06][352879326920387][318 ms][DEBUG] START check_boot_completed [2025-08-22 16:33:06][352879326920387][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:33:06][352879326920387][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:33:06][352879326920387][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:33:07][352879326920387][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:33:07][352879326920387][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:33:07][352879326920387][411 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:33:07][352879326920387][411 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879326920387\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX105ZFFN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1739\"}'\'' -e'"" [2025-08-22 16:33:07][352879326920387][411 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:33:07][352879326920387][411 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352879326920387\",\"model\":\"SM-A346E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RFCX105ZFFN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1739\"}'\'' -e'"" [2025-08-22 16:33:11][352879326920387][5269 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30696184-82f2-4122-9e12-a75a9206d630","id":"QR_30696184-82f2-4122-9e12-a75a9206d630","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:33:12][352879326920387][5426 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3152 [2025-08-22 16:33:12][352879326920387][5426 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-08-22 16:33:12][352879326920387][5426 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:35:04][350616254964157][0 ms][INFO] === Request start === [2025-08-22 16:35:04][350616254964157][1 ms][DEBUG] START check_scloud [2025-08-22 16:35:04][350616254964157][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:35:05][350616254964157][280 ms][DEBUG] SU: done in 279 ms; outu0_a118 10405 30738 24545916 194884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:35:05][350616254964157][280 ms][DEBUG] targetPkg: running [2025-08-22 16:35:05][350616254964157][280 ms][DEBUG] END check_scloud in 279 ms [2025-08-22 16:35:05][350616254964157][280 ms][DEBUG] START check_boot_completed [2025-08-22 16:35:05][350616254964157][280 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:35:05][350616254964157][326 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:35:05][350616254964157][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:35:05][350616254964157][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:35:05][350616254964157][374 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:35:05][350616254964157][374 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:35:05][350616254964157][374 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616254964157\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX129Z8SW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6979\"}'\'' -e'"" [2025-08-22 16:35:05][350616254964157][374 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:35:05][350616254964157][374 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350616254964157\",\"model\":\"SM-A256E\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZCX129Z8SW\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6979\"}'\'' -e'"" [2025-08-22 16:35:09][350616254964157][4591 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8cf9192a-57f5-4ba2-8d79-fa71ee85eb2a","id":"QR_8cf9192a-57f5-4ba2-8d79-fa71ee85eb2a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:35:09][350616254964157][4747 ms][DEBUG] proc_open done in 4373 ms; code=255; res.len=3152 [2025-08-22 16:35:09][350616254964157][4747 ms][DEBUG] END runCmdUntilRes#1 in 4373 ms [2025-08-22 16:35:09][350616254964157][4747 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:36:08][350090710438331][1 ms][INFO] === Request start === [2025-08-22 16:36:08][350090710438331][2 ms][DEBUG] START check_scloud [2025-08-22 16:36:08][350090710438331][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:36:08][350090710438331][311 ms][DEBUG] SU: done in 309 ms; outu0_a118 10405 30738 24695768 203092 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:36:08][350090710438331][311 ms][DEBUG] targetPkg: running [2025-08-22 16:36:08][350090710438331][311 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 16:36:08][350090710438331][311 ms][DEBUG] START check_boot_completed [2025-08-22 16:36:08][350090710438331][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:36:08][350090710438331][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:36:08][350090710438331][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:36:08][350090710438331][420 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:36:08][350090710438331][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:36:08][350090710438331][420 ms][DEBUG] START check_internet [2025-08-22 16:36:08][350090710438331][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:36:09][350090710438331][951 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.885/201.885/201.885/0.000 ms\n [2025-08-22 16:36:09][350090710438331][951 ms][DEBUG] check_internet: online [2025-08-22 16:36:09][350090710438331][951 ms][DEBUG] END check_internet in 531 ms [2025-08-22 16:36:09][350090710438331][951 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:36:09][350090710438331][952 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350090710438331\",\"model\":\"SM-A546E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW40SR9PL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5961\"}'\'' -e'"" [2025-08-22 16:36:09][350090710438331][952 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:36:09][350090710438331][952 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350090710438331\",\"model\":\"SM-A546E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RFCW40SR9PL\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5961\"}'\'' -e'"" [2025-08-22 16:36:14][350090710438331][6606 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30a367ab-0c74-4198-ab7f-04c97e84b4c0","id":"QR_30a367ab-0c74-4198-ab7f-04c97e84b4c0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:36:15][350090710438331][6762 ms][DEBUG] proc_open done in 5810 ms; code=255; res.len=3152 [2025-08-22 16:36:15][350090710438331][6762 ms][DEBUG] END runCmdUntilRes#1 in 5810 ms [2025-08-22 16:36:15][350090710438331][6762 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:37:07][351024052414666][1 ms][INFO] === Request start === [2025-08-22 16:37:07][351024052414666][2 ms][DEBUG] START check_scloud [2025-08-22 16:37:07][351024052414666][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:37:07][351024052414666][322 ms][DEBUG] SU: done in 320 ms; outu0_a118 10405 30738 24807548 213816 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:37:07][351024052414666][322 ms][DEBUG] targetPkg: running [2025-08-22 16:37:07][351024052414666][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-22 16:37:07][351024052414666][322 ms][DEBUG] START check_boot_completed [2025-08-22 16:37:07][351024052414666][322 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:37:07][351024052414666][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:37:07][351024052414666][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:37:07][351024052414666][431 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:37:07][351024052414666][431 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:37:07][351024052414666][432 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:37:07][351024052414666][432 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024052414666\",\"model\":\"SM-A536U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT62CHCSW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7570\"}'\'' -e'"" [2025-08-22 16:37:07][351024052414666][432 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:37:07][351024052414666][432 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351024052414666\",\"model\":\"SM-A536U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CT62CHCSW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7570\"}'\'' -e'"" [2025-08-22 16:37:13][351024052414666][5524 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_419f275d-e5d9-47a3-8f2c-3d64864bf771","id":"QR_419f275d-e5d9-47a3-8f2c-3d64864bf771","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:37:13][351024052414666][5680 ms][DEBUG] proc_open done in 5248 ms; code=255; res.len=3152 [2025-08-22 16:37:13][351024052414666][5680 ms][DEBUG] END runCmdUntilRes#1 in 5248 ms [2025-08-22 16:37:13][351024052414666][5680 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:37:21][350437730746260][0 ms][INFO] === Request start === [2025-08-22 16:37:21][350437730746260][1 ms][DEBUG] START check_scloud [2025-08-22 16:37:21][350437730746260][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:37:21][350437730746260][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 10405 30738 24957700 219392 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:37:21][350437730746260][293 ms][DEBUG] targetPkg: running [2025-08-22 16:37:21][350437730746260][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-22 16:37:21][350437730746260][293 ms][DEBUG] START check_boot_completed [2025-08-22 16:37:21][350437730746260][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:37:21][350437730746260][339 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:37:21][350437730746260][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:37:21][350437730746260][402 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:37:21][350437730746260][402 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:37:21][350437730746260][402 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:37:21][350437730746260][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437730746260\",\"model\":\"SM-A065M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YY20CCLKR\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9798\"}'\'' -e'"" [2025-08-22 16:37:21][350437730746260][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:37:21][350437730746260][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350437730746260\",\"model\":\"SM-A065M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YY20CCLKR\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9798\"}'\'' -e'"" [2025-08-22 16:37:26][350437730746260][5760 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97bd5a2f-c5ed-4273-95fb-7a2ee3649619","id":"QR_97bd5a2f-c5ed-4273-95fb-7a2ee3649619","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:37:27][350437730746260][5916 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3152 [2025-08-22 16:37:27][350437730746260][5916 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-22 16:37:27][350437730746260][5916 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:39:15][354747953381108][1 ms][INFO] === Request start === [2025-08-22 16:39:15][354747953381108][2 ms][DEBUG] START check_scloud [2025-08-22 16:39:15][354747953381108][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:39:15][354747953381108][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 10405 30738 25096136 228736 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:39:15][354747953381108][296 ms][DEBUG] targetPkg: running [2025-08-22 16:39:15][354747953381108][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-22 16:39:15][354747953381108][296 ms][DEBUG] START check_boot_completed [2025-08-22 16:39:15][354747953381108][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:39:15][354747953381108][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:39:15][354747953381108][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:39:15][354747953381108][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:39:15][354747953381108][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:39:15][354747953381108][375 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:39:15][354747953381108][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747953381108\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60445TR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9122\"}'\'' -e'"" [2025-08-22 16:39:15][354747953381108][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:39:15][354747953381108][375 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747953381108\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60445TR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9122\"}'\'' -e'"" [2025-08-22 16:39:19][354747953381108][4295 ms][DEBUG] proc_open done in 3921 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 16:39:19][354747953381108][4295 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-22 16:39:19][354747953381108][4295 ms][WARN] Detected error: Process with pid 10405 either refused to load frida-agent, or terminated during injection [2025-08-22 16:39:19][354747953381108][4295 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 16:39:19][354747953381108][4436 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 16:39:19][354747953381108][4436 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 16:39:19][354747953381108][4436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:39:19][354747953381108][4561 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:39:19][354747953381108][4561 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:39:19][354747953381108][4701 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:39:21][354747953381108][6717 ms][DEBUG] START check_boot_completed [2025-08-22 16:39:21][354747953381108][6717 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:39:21][354747953381108][6764 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:39:21][354747953381108][6764 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:39:21][354747953381108][6810 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:39:21][354747953381108][6810 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:39:24][354747953381108][9825 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 16:39:24][354747953381108][9825 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354747953381108\",\"model\":\"SM-A155F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58X60445TR\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9122\"}'\'' -e'"" [2025-08-22 16:39:29][354747953381108][13981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_5c511180-eaab-4fc5-879f-4fd3fdb72600","id":"QR_5c511180-eaab-4fc5-879f-4fd3fdb72600","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:39:29][354747953381108][14137 ms][DEBUG] proc_open done in 4311 ms; code=255; res.len=3152 [2025-08-22 16:39:29][354747953381108][14137 ms][DEBUG] END runCmdUntilRes#2 in 4312 ms [2025-08-22 16:39:29][354747953381108][14137 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:40:08][355181113461338][0 ms][INFO] === Request start === [2025-08-22 16:40:08][355181113461338][1 ms][DEBUG] START check_scloud [2025-08-22 16:40:08][355181113461338][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:40:08][355181113461338][283 ms][DEBUG] SU: done in 281 ms; outu0_a118 12260 30738 23757324 126908 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:40:08][355181113461338][283 ms][DEBUG] targetPkg: running [2025-08-22 16:40:08][355181113461338][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-22 16:40:08][355181113461338][283 ms][DEBUG] START check_boot_completed [2025-08-22 16:40:08][355181113461338][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:40:08][355181113461338][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:40:08][355181113461338][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:40:08][355181113461338][392 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:40:08][355181113461338][392 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:40:08][355181113461338][392 ms][DEBUG] START check_internet [2025-08-22 16:40:08][355181113461338][392 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:40:09][355181113461338][954 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=256 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 256.012/256.012/256.012/0.000 ms\n [2025-08-22 16:40:09][355181113461338][954 ms][DEBUG] check_internet: online [2025-08-22 16:40:09][355181113461338][955 ms][DEBUG] END check_internet in 563 ms [2025-08-22 16:40:09][355181113461338][955 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:40:09][355181113461338][955 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355181113461338\",\"model\":\"SM-A716U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CN81HXC2Z\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2832\"}'\'' -e'"" [2025-08-22 16:40:09][355181113461338][955 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:40:09][355181113461338][955 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355181113461338\",\"model\":\"SM-A716U\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CN81HXC2Z\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2832\"}'\'' -e'"" [2025-08-22 16:40:16][355181113461338][7640 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8d66e756-16e5-44ec-80ae-4289c9396ee5","id":"QR_8d66e756-16e5-44ec-80ae-4289c9396ee5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:40:16][355181113461338][7796 ms][DEBUG] proc_open done in 6841 ms; code=255; res.len=3152 [2025-08-22 16:40:16][355181113461338][7796 ms][DEBUG] END runCmdUntilRes#1 in 6841 ms [2025-08-22 16:40:16][355181113461338][7796 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:40:31][358533130749433][0 ms][INFO] === Request start === [2025-08-22 16:40:31][358533130749433][1 ms][DEBUG] START check_scloud [2025-08-22 16:40:31][358533130749433][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:40:31][358533130749433][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 12260 30738 23934548 137196 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:40:31][358533130749433][318 ms][DEBUG] targetPkg: running [2025-08-22 16:40:31][358533130749433][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 16:40:31][358533130749433][318 ms][DEBUG] START check_boot_completed [2025-08-22 16:40:31][358533130749433][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:40:31][358533130749433][364 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:40:31][358533130749433][364 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:40:31][358533130749433][411 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:40:31][358533130749433][411 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:40:31][358533130749433][411 ms][DEBUG] START check_internet [2025-08-22 16:40:31][358533130749433][411 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:40:31][358533130749433][833 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.316/201.316/201.316/0.000 ms\n [2025-08-22 16:40:31][358533130749433][833 ms][DEBUG] check_internet: online [2025-08-22 16:40:31][358533130749433][833 ms][DEBUG] END check_internet in 422 ms [2025-08-22 16:40:31][358533130749433][833 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:40:31][358533130749433][833 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358533130749433\",\"model\":\"SM-X610\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X90CZRCY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1181\"}'\'' -e'"" [2025-08-22 16:40:31][358533130749433][834 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:40:31][358533130749433][834 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358533130749433\",\"model\":\"SM-X610\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R52X90CZRCY\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1181\"}'\'' -e'"" [2025-08-22 16:40:36][358533130749433][5410 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b9a6fe38-42f9-458c-bd1e-dddbe88adb2f","id":"QR_b9a6fe38-42f9-458c-bd1e-dddbe88adb2f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:40:36][358533130749433][5566 ms][DEBUG] proc_open done in 4732 ms; code=255; res.len=3152 [2025-08-22 16:40:36][358533130749433][5566 ms][DEBUG] END runCmdUntilRes#1 in 4733 ms [2025-08-22 16:40:36][358533130749433][5566 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:41:06][350804337232301][0 ms][INFO] === Request start === [2025-08-22 16:41:06][350804337232301][1 ms][DEBUG] START check_scloud [2025-08-22 16:41:06][350804337232301][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:41:06][350804337232301][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 12260 30738 24044244 148884 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:41:06][350804337232301][292 ms][DEBUG] targetPkg: running [2025-08-22 16:41:06][350804337232301][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-22 16:41:06][350804337232301][292 ms][DEBUG] START check_boot_completed [2025-08-22 16:41:06][350804337232301][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:41:06][350804337232301][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:41:06][350804337232301][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:41:07][350804337232301][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:41:07][350804337232301][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:41:07][350804337232301][401 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:41:07][350804337232301][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804337232301\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TB0C7L3N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3081\"}'\'' -e'"" [2025-08-22 16:41:07][350804337232301][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:41:07][350804337232301][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350804337232301\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RZ8TB0C7L3N\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3081\"}'\'' -e'"" [2025-08-22 16:41:11][350804337232301][4728 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05b647fe-556c-4092-82ee-53441183b16c","id":"QR_05b647fe-556c-4092-82ee-53441183b16c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:41:11][350804337232301][4884 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3152 [2025-08-22 16:41:11][350804337232301][4884 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-22 16:41:11][350804337232301][4884 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:45:05][350455582007995][1 ms][INFO] === Request start === [2025-08-22 16:45:05][350455582007995][2 ms][DEBUG] START check_scloud [2025-08-22 16:45:05][350455582007995][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:45:05][350455582007995][307 ms][DEBUG] SU: done in 305 ms; outu0_a118 12260 30738 24136556 160288 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:45:05][350455582007995][307 ms][DEBUG] targetPkg: running [2025-08-22 16:45:05][350455582007995][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 16:45:05][350455582007995][307 ms][DEBUG] START check_boot_completed [2025-08-22 16:45:05][350455582007995][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:45:05][350455582007995][354 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:45:05][350455582007995][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:45:05][350455582007995][448 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 16:45:05][350455582007995][448 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 16:45:05][350455582007995][448 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:45:05][350455582007995][448 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455582007995\",\"model\":\"SM-A165M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y700XTRW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1745\"}'\'' -e'"" [2025-08-22 16:45:05][350455582007995][448 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:45:05][350455582007995][448 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350455582007995\",\"model\":\"SM-A165M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y700XTRW\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1745\"}'\'' -e'"" [2025-08-22 16:45:12][350455582007995][6977 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_09240716-0432-4953-bbf4-3ce2711ecc6a","id":"QR_09240716-0432-4953-bbf4-3ce2711ecc6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:45:12][350455582007995][7133 ms][DEBUG] proc_open done in 6685 ms; code=255; res.len=3152 [2025-08-22 16:45:12][350455582007995][7134 ms][DEBUG] END runCmdUntilRes#1 in 6685 ms [2025-08-22 16:45:12][350455582007995][7134 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:46:15][354106708440091][1 ms][INFO] === Request start === [2025-08-22 16:46:15][354106708440091][2 ms][DEBUG] START check_scloud [2025-08-22 16:46:15][354106708440091][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:46:16][354106708440091][304 ms][DEBUG] SU: done in 302 ms; outu0_a118 12260 30738 24297488 171996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:46:16][354106708440091][304 ms][DEBUG] targetPkg: running [2025-08-22 16:46:16][354106708440091][304 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 16:46:16][354106708440091][304 ms][DEBUG] START check_boot_completed [2025-08-22 16:46:16][354106708440091][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:46:16][354106708440091][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:46:16][354106708440091][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:46:16][354106708440091][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:46:16][354106708440091][397 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:46:16][354106708440091][397 ms][DEBUG] START check_internet [2025-08-22 16:46:16][354106708440091][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:46:16][354106708440091][897 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.162/201.162/201.162/0.000 ms\n [2025-08-22 16:46:16][354106708440091][897 ms][DEBUG] check_internet: online [2025-08-22 16:46:16][354106708440091][897 ms][DEBUG] END check_internet in 500 ms [2025-08-22 16:46:16][354106708440091][897 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:46:16][354106708440091][897 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708440091\",\"model\":\"SM-A065M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R83Y1028T8W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9344\"}'\'' -e'"" [2025-08-22 16:46:16][354106708440091][897 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:46:16][354106708440091][897 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354106708440091\",\"model\":\"SM-A065M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R83Y1028T8W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9344\"}'\'' -e'"" [2025-08-22 16:46:22][354106708440091][6661 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_97ceb252-1d20-4a06-a5a3-72423cf37bd5","id":"QR_97ceb252-1d20-4a06-a5a3-72423cf37bd5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:46:22][354106708440091][6817 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3152 [2025-08-22 16:46:22][354106708440091][6818 ms][DEBUG] END runCmdUntilRes#1 in 5920 ms [2025-08-22 16:46:22][354106708440091][6818 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:47:06][353684142866163][1 ms][INFO] === Request start === [2025-08-22 16:47:06][353684142866163][2 ms][DEBUG] START check_scloud [2025-08-22 16:47:06][353684142866163][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:47:07][353684142866163][301 ms][DEBUG] SU: done in 299 ms; outu0_a118 12260 30738 24463660 184020 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:47:07][353684142866163][301 ms][DEBUG] targetPkg: running [2025-08-22 16:47:07][353684142866163][301 ms][DEBUG] END check_scloud in 300 ms [2025-08-22 16:47:07][353684142866163][301 ms][DEBUG] START check_boot_completed [2025-08-22 16:47:07][353684142866163][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:47:07][353684142866163][348 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:47:07][353684142866163][348 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:47:07][353684142866163][395 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:47:07][353684142866163][395 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:47:07][353684142866163][395 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:47:07][353684142866163][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142866163\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y60LES7K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1256\"}'\'' -e'"" [2025-08-22 16:47:07][353684142866163][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:47:07][353684142866163][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142866163\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y60LES7K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1256\"}'\'' -e'"" [2025-08-22 16:47:10][353684142866163][4269 ms][DEBUG] frida res:res:{"code":4030105,"message":"USER_IS_NOT_ACTIVE","data":"User is not active in KME."}\r\n [2025-08-22 16:47:11][353684142866163][4425 ms][DEBUG] proc_open done in 4030 ms; code=255; res.len=83 [2025-08-22 16:47:11][353684142866163][4425 ms][DEBUG] END runCmdUntilRes#1 in 4030 ms [2025-08-22 16:47:11][353684142866163][4425 ms][INFO] SUCCESS response from frida (len=83) [2025-08-22 16:47:11][][0 ms][INFO] === Request start === [2025-08-22 16:47:11][][1 ms][DEBUG] START check_scloud [2025-08-22 16:47:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:47:11][][257 ms][DEBUG] SU: done in 256 ms; outu0_a118 12260 30738 24631788 194416 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:47:11][][257 ms][DEBUG] targetPkg: running [2025-08-22 16:47:11][][257 ms][DEBUG] END check_scloud in 256 ms [2025-08-22 16:47:11][][257 ms][DEBUG] START check_boot_completed [2025-08-22 16:47:11][][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:47:11][][304 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:47:11][][304 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:47:11][][351 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:47:11][][351 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:47:11][][351 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:47:11][][351 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y60LES7K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2610\"}'\'' -e'"" [2025-08-22 16:47:11][][351 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:47:11][][351 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y60LES7K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2610\"}'\'' -e'"" [2025-08-22 16:47:15][][3897 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:47:15][][4053 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=107 [2025-08-22 16:47:15][][4053 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-22 16:47:15][][4053 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:47:15][][0 ms][INFO] === Request start === [2025-08-22 16:47:15][][1 ms][DEBUG] START check_scloud [2025-08-22 16:47:15][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:47:16][][304 ms][DEBUG] SU: done in 303 ms; outu0_a118 12260 30738 24798836 206132 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:47:16][][304 ms][DEBUG] targetPkg: running [2025-08-22 16:47:16][][304 ms][DEBUG] END check_scloud in 303 ms [2025-08-22 16:47:16][][304 ms][DEBUG] START check_boot_completed [2025-08-22 16:47:16][][304 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:47:16][][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:47:16][][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:47:16][][397 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:47:16][][397 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:47:16][][397 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:47:16][][398 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y60LES7K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2259\"}'\'' -e'"" [2025-08-22 16:47:16][][398 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:47:16][][398 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y60LES7K\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2259\"}'\'' -e'"" [2025-08-22 16:47:19][][4099 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:47:20][][4256 ms][DEBUG] proc_open done in 3858 ms; code=255; res.len=107 [2025-08-22 16:47:20][][4256 ms][DEBUG] END runCmdUntilRes#1 in 3858 ms [2025-08-22 16:47:20][][4256 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:47:22][353684142866163][0 ms][INFO] === Request start === [2025-08-22 16:47:22][353684142866163][1 ms][DEBUG] START check_scloud [2025-08-22 16:47:22][353684142866163][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:47:22][353684142866163][309 ms][DEBUG] SU: done in 308 ms; outu0_a118 12260 30738 24928244 216856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:47:22][353684142866163][309 ms][DEBUG] targetPkg: running [2025-08-22 16:47:22][353684142866163][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 16:47:22][353684142866163][310 ms][DEBUG] START check_boot_completed [2025-08-22 16:47:22][353684142866163][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:47:22][353684142866163][356 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:47:22][353684142866163][356 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:47:22][353684142866163][450 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 16:47:22][353684142866163][450 ms][DEBUG] END check_boot_completed in 140 ms [2025-08-22 16:47:22][353684142866163][450 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:47:22][353684142866163][450 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142866163\",\"model\":\"SM-A165F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y60LES7K\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2707\"}'\'' -e'"" [2025-08-22 16:47:22][353684142866163][450 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:47:22][353684142866163][450 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353684142866163\",\"model\":\"SM-A165F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y60LES7K\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC2707\"}'\'' -e'"" [2025-08-22 16:47:27][353684142866163][5480 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2f5daec7-ba5e-434a-8245-ec93d26531e0","id":"QR_2f5daec7-ba5e-434a-8245-ec93d26531e0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:47:27][353684142866163][5636 ms][DEBUG] proc_open done in 5186 ms; code=255; res.len=3152 [2025-08-22 16:47:27][353684142866163][5636 ms][DEBUG] END runCmdUntilRes#1 in 5186 ms [2025-08-22 16:47:27][353684142866163][5636 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:48:12][354291425209316][0 ms][INFO] === Request start === [2025-08-22 16:48:12][354291425209316][0 ms][DEBUG] START check_scloud [2025-08-22 16:48:12][354291425209316][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:48:12][354291425209316][283 ms][DEBUG] SU: done in 282 ms; outu0_a118 12260 30738 25016428 228944 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:48:12][354291425209316][283 ms][DEBUG] targetPkg: running [2025-08-22 16:48:12][354291425209316][283 ms][DEBUG] END check_scloud in 283 ms [2025-08-22 16:48:12][354291425209316][283 ms][DEBUG] START check_boot_completed [2025-08-22 16:48:12][354291425209316][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:48:12][354291425209316][314 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:48:12][354291425209316][314 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:48:12][354291425209316][377 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:48:12][354291425209316][377 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:48:12][354291425209316][377 ms][DEBUG] START check_internet [2025-08-22 16:48:12][354291425209316][377 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:48:13][354291425209316][689 ms][DEBUG] SU: done in 312 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=196 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 196.118/196.118/196.118/0.000 ms\n [2025-08-22 16:48:13][354291425209316][689 ms][DEBUG] check_internet: online [2025-08-22 16:48:13][354291425209316][689 ms][DEBUG] END check_internet in 313 ms [2025-08-22 16:48:13][354291425209316][689 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:48:13][354291425209316][689 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291425209316\",\"model\":\"SM-A127M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8T10B612E\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9650\"}'\'' -e'"" [2025-08-22 16:48:13][354291425209316][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:48:13][354291425209316][690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354291425209316\",\"model\":\"SM-A127M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8T10B612E\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9650\"}'\'' -e'"" [2025-08-22 16:48:18][354291425209316][5844 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_40522000-86eb-4f54-a788-f8757a62cb08","id":"QR_40522000-86eb-4f54-a788-f8757a62cb08","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:48:18][354291425209316][6000 ms][DEBUG] proc_open done in 5310 ms; code=255; res.len=3152 [2025-08-22 16:48:18][354291425209316][6000 ms][DEBUG] END runCmdUntilRes#1 in 5310 ms [2025-08-22 16:48:18][354291425209316][6000 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:49:11][357967976046622][1 ms][INFO] === Request start === [2025-08-22 16:49:11][357967976046622][2 ms][DEBUG] START check_scloud [2025-08-22 16:49:11][357967976046622][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:49:11][357967976046622][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 12260 30738 25154900 240456 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:49:11][357967976046622][310 ms][DEBUG] targetPkg: running [2025-08-22 16:49:11][357967976046622][310 ms][DEBUG] END check_scloud in 308 ms [2025-08-22 16:49:11][357967976046622][310 ms][DEBUG] START check_boot_completed [2025-08-22 16:49:11][357967976046622][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:49:11][357967976046622][357 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:49:11][357967976046622][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:49:11][357967976046622][435 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 16:49:11][357967976046622][435 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 16:49:11][357967976046622][435 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:49:11][357967976046622][435 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976046622\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y20KJELN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1353\"}'\'' -e'"" [2025-08-22 16:49:11][357967976046622][435 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:49:11][357967976046622][435 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976046622\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y20KJELN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1353\"}'\'' -e'"" [2025-08-22 16:49:15][357967976046622][4278 ms][DEBUG] proc_open done in 3843 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 16:49:15][357967976046622][4278 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-22 16:49:15][357967976046622][4278 ms][WARN] Detected error: Process with pid 12260 either refused to load frida-agent, or terminated during injection [2025-08-22 16:49:15][357967976046622][4278 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 16:49:15][357967976046622][4449 ms][DEBUG] SU: done in 171 ms; out [2025-08-22 16:49:15][357967976046622][4449 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 16:49:15][357967976046622][4450 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:49:15][357967976046622][4574 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:49:15][357967976046622][4575 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:49:15][357967976046622][4715 ms][DEBUG] SU: done in 140 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:49:17][357967976046622][6730 ms][DEBUG] START check_boot_completed [2025-08-22 16:49:17][357967976046622][6730 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:49:17][357967976046622][6777 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:49:17][357967976046622][6777 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:49:17][357967976046622][6824 ms][DEBUG] SU: done in 46 ms; out [2025-08-22 16:49:17][357967976046622][6824 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:49:20][357967976046622][9839 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 16:49:20][357967976046622][9839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976046622\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y20KJELN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC1353\"}'\'' -e'"" [2025-08-22 16:49:24][357967976046622][13650 ms][DEBUG] frida res:res:{"code":4030105,"message":"USER_IS_NOT_ACTIVE","data":"User is not active in KME."}\r\n [2025-08-22 16:49:24][357967976046622][13806 ms][DEBUG] proc_open done in 3968 ms; code=255; res.len=83 [2025-08-22 16:49:24][357967976046622][13806 ms][DEBUG] END runCmdUntilRes#2 in 3968 ms [2025-08-22 16:49:24][357967976046622][13806 ms][INFO] SUCCESS response from frida (len=83) [2025-08-22 16:49:25][][0 ms][INFO] === Request start === [2025-08-22 16:49:25][][1 ms][DEBUG] START check_scloud [2025-08-22 16:49:25][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:49:25][][247 ms][DEBUG] SU: done in 246 ms; outu0_a118 13726 30738 23831804 123836 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:49:25][][247 ms][DEBUG] targetPkg: running [2025-08-22 16:49:25][][247 ms][DEBUG] END check_scloud in 246 ms [2025-08-22 16:49:25][][247 ms][DEBUG] START check_boot_completed [2025-08-22 16:49:25][][247 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:49:25][][294 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:49:25][][294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:49:25][][341 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:49:25][][341 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:49:25][][341 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:49:25][][341 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y20KJELN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4125\"}'\'' -e'"" [2025-08-22 16:49:25][][341 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:49:25][][341 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y20KJELN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4125\"}'\'' -e'"" [2025-08-22 16:49:28][][3793 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:49:29][][3949 ms][DEBUG] proc_open done in 3608 ms; code=255; res.len=107 [2025-08-22 16:49:29][][3949 ms][DEBUG] END runCmdUntilRes#1 in 3608 ms [2025-08-22 16:49:29][][3949 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:49:29][][0 ms][INFO] === Request start === [2025-08-22 16:49:29][][1 ms][DEBUG] START check_scloud [2025-08-22 16:49:29][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:49:29][][291 ms][DEBUG] SU: done in 290 ms; outu0_a118 13726 30738 23971908 135284 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:49:29][][291 ms][DEBUG] targetPkg: running [2025-08-22 16:49:29][][291 ms][DEBUG] END check_scloud in 290 ms [2025-08-22 16:49:29][][291 ms][DEBUG] START check_boot_completed [2025-08-22 16:49:29][][291 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:49:29][][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:49:29][][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:49:29][][400 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:49:29][][400 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:49:29][][400 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:49:29][][400 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y20KJELN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9464\"}'\'' -e'"" [2025-08-22 16:49:29][][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:49:29][][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8Y20KJELN\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9464\"}'\'' -e'"" [2025-08-22 16:49:33][][3899 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:49:33][][4055 ms][DEBUG] proc_open done in 3655 ms; code=255; res.len=107 [2025-08-22 16:49:33][][4055 ms][DEBUG] END runCmdUntilRes#1 in 3655 ms [2025-08-22 16:49:33][][4055 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:49:35][357967976046622][0 ms][INFO] === Request start === [2025-08-22 16:49:35][357967976046622][1 ms][DEBUG] START check_scloud [2025-08-22 16:49:35][357967976046622][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:49:35][357967976046622][260 ms][DEBUG] SU: done in 259 ms; outu0_a118 13726 30738 24135836 149068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:49:35][357967976046622][260 ms][DEBUG] targetPkg: running [2025-08-22 16:49:35][357967976046622][260 ms][DEBUG] END check_scloud in 259 ms [2025-08-22 16:49:35][357967976046622][260 ms][DEBUG] START check_boot_completed [2025-08-22 16:49:35][357967976046622][260 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:49:35][357967976046622][307 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:49:35][357967976046622][307 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:49:35][357967976046622][354 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:49:35][357967976046622][354 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:49:35][357967976046622][354 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:49:35][357967976046622][354 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976046622\",\"model\":\"SM-A165F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y20KJELN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2120\"}'\'' -e'"" [2025-08-22 16:49:35][357967976046622][354 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:49:35][357967976046622][354 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357967976046622\",\"model\":\"SM-A165F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8Y20KJELN\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2120\"}'\'' -e'"" [2025-08-22 16:49:41][357967976046622][5977 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e45e747f-4c23-4474-85ce-4d7c1c6fdaa9","id":"QR_e45e747f-4c23-4474-85ce-4d7c1c6fdaa9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:49:41][357967976046622][6134 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3152 [2025-08-22 16:49:41][357967976046622][6134 ms][DEBUG] END runCmdUntilRes#1 in 5779 ms [2025-08-22 16:49:41][357967976046622][6134 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:50:08][351771925353659][0 ms][INFO] === Request start === [2025-08-22 16:50:08][351771925353659][1 ms][DEBUG] START check_scloud [2025-08-22 16:50:08][351771925353659][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:50:08][351771925353659][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 13726 30738 24124324 160588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:50:08][351771925353659][315 ms][DEBUG] targetPkg: running [2025-08-22 16:50:08][351771925353659][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 16:50:08][351771925353659][315 ms][DEBUG] START check_boot_completed [2025-08-22 16:50:08][351771925353659][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:50:08][351771925353659][362 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:50:08][351771925353659][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:50:08][351771925353659][409 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:50:08][351771925353659][409 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:50:08][351771925353659][409 ms][DEBUG] START check_internet [2025-08-22 16:50:08][351771925353659][409 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:50:08][351771925353659][706 ms][DEBUG] SU: done in 297 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=197 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 197.756/197.756/197.756/0.000 ms\n [2025-08-22 16:50:08][351771925353659][706 ms][DEBUG] check_internet: online [2025-08-22 16:50:08][351771925353659][706 ms][DEBUG] END check_internet in 297 ms [2025-08-22 16:50:08][351771925353659][706 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:50:08][351771925353659][706 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925353659\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXB0LGHCX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6362\"}'\'' -e'"" [2025-08-22 16:50:08][351771925353659][706 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:50:08][351771925353659][706 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351771925353659\",\"model\":\"SM-A556E\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CXB0LGHCX\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6362\"}'\'' -e'"" [2025-08-22 16:50:13][351771925353659][5236 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c0348f4d-f74d-4cd2-8935-d0535fb6c901","id":"QR_c0348f4d-f74d-4cd2-8935-d0535fb6c901","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:50:13][351771925353659][5392 ms][DEBUG] proc_open done in 4685 ms; code=255; res.len=3152 [2025-08-22 16:50:13][351771925353659][5392 ms][DEBUG] END runCmdUntilRes#1 in 4686 ms [2025-08-22 16:50:13][351771925353659][5392 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:51:05][358141433626819][0 ms][INFO] === Request start === [2025-08-22 16:51:05][358141433626819][1 ms][DEBUG] START check_scloud [2025-08-22 16:51:05][358141433626819][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:51:06][358141433626819][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 13726 30738 24306852 171208 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:51:06][358141433626819][305 ms][DEBUG] targetPkg: running [2025-08-22 16:51:06][358141433626819][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 16:51:06][358141433626819][305 ms][DEBUG] START check_boot_completed [2025-08-22 16:51:06][358141433626819][305 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:51:06][358141433626819][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:51:06][358141433626819][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:51:06][358141433626819][399 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 16:51:06][358141433626819][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:51:06][358141433626819][399 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:51:06][358141433626819][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141433626819\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y40G8ZWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6238\"}'\'' -e'"" [2025-08-22 16:51:06][358141433626819][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:51:06][358141433626819][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141433626819\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y40G8ZWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6238\"}'\'' -e'"" [2025-08-22 16:51:10][358141433626819][4335 ms][DEBUG] frida res:res:{"code":4030105,"message":"USER_IS_NOT_ACTIVE","data":"User is not active in KME."}\r\n [2025-08-22 16:51:10][358141433626819][4491 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=83 [2025-08-22 16:51:10][358141433626819][4491 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-22 16:51:10][358141433626819][4491 ms][INFO] SUCCESS response from frida (len=83) [2025-08-22 16:51:10][][0 ms][INFO] === Request start === [2025-08-22 16:51:10][][1 ms][DEBUG] START check_scloud [2025-08-22 16:51:10][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:51:11][][287 ms][DEBUG] SU: done in 286 ms; outu0_a118 13726 30738 24476076 183068 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:51:11][][288 ms][DEBUG] targetPkg: running [2025-08-22 16:51:11][][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-22 16:51:11][][288 ms][DEBUG] START check_boot_completed [2025-08-22 16:51:11][][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:51:11][][334 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:51:11][][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:51:11][][412 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 16:51:11][][413 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 16:51:11][][413 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:51:11][][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y40G8ZWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4338\"}'\'' -e'"" [2025-08-22 16:51:11][][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:51:11][][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y40G8ZWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4338\"}'\'' -e'"" [2025-08-22 16:51:14][][3958 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:51:14][][4114 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=107 [2025-08-22 16:51:14][][4114 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-22 16:51:14][][4115 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:51:15][][1 ms][INFO] === Request start === [2025-08-22 16:51:15][][1 ms][DEBUG] START check_scloud [2025-08-22 16:51:15][][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:51:15][][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 13726 30738 24626740 194844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:51:15][][314 ms][DEBUG] targetPkg: running [2025-08-22 16:51:15][][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 16:51:15][][314 ms][DEBUG] START check_boot_completed [2025-08-22 16:51:15][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:51:15][][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:51:15][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:51:15][][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:51:15][][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 16:51:15][][408 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:51:15][][408 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y40G8ZWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4543\"}'\'' -e'"" [2025-08-22 16:51:15][][408 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:51:15][][408 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A165F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R58Y40G8ZWA\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"MEA\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC4543\"}'\'' -e'"" [2025-08-22 16:51:19][][3954 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:51:19][][4110 ms][DEBUG] proc_open done in 3702 ms; code=255; res.len=107 [2025-08-22 16:51:19][][4110 ms][DEBUG] END runCmdUntilRes#1 in 3702 ms [2025-08-22 16:51:19][][4110 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:51:21][358141433626819][0 ms][INFO] === Request start === [2025-08-22 16:51:21][358141433626819][1 ms][DEBUG] START check_scloud [2025-08-22 16:51:21][358141433626819][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:51:21][358141433626819][296 ms][DEBUG] SU: done in 295 ms; outu0_a118 13726 30738 24761968 206000 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:51:21][358141433626819][296 ms][DEBUG] targetPkg: running [2025-08-22 16:51:21][358141433626819][296 ms][DEBUG] END check_scloud in 295 ms [2025-08-22 16:51:21][358141433626819][296 ms][DEBUG] START check_boot_completed [2025-08-22 16:51:21][358141433626819][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:51:21][358141433626819][342 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:51:21][358141433626819][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:51:21][358141433626819][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:51:21][358141433626819][405 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:51:21][358141433626819][405 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:51:21][358141433626819][405 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141433626819\",\"model\":\"SM-A165F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y40G8ZWA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5471\"}'\'' -e'"" [2025-08-22 16:51:21][358141433626819][405 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:51:21][358141433626819][405 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358141433626819\",\"model\":\"SM-A165F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58Y40G8ZWA\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5471\"}'\'' -e'"" [2025-08-22 16:51:31][358141433626819][10590 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ea18822d-faa5-413a-9c7c-46fd7c4fdae5","id":"QR_ea18822d-faa5-413a-9c7c-46fd7c4fdae5","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD22.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false}}\r\n [2025-08-22 16:51:32][358141433626819][10746 ms][DEBUG] proc_open done in 10341 ms; code=255; res.len=3152 [2025-08-22 16:51:32][358141433626819][10746 ms][DEBUG] END runCmdUntilRes#1 in 10341 ms [2025-08-22 16:51:32][358141433626819][10746 ms][INFO] SUCCESS response from frida (len=3152) [2025-08-22 16:52:20][354360418053583][0 ms][INFO] === Request start === [2025-08-22 16:52:20][354360418053583][1 ms][DEBUG] START check_scloud [2025-08-22 16:52:20][354360418053583][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:52:20][354360418053583][320 ms][DEBUG] SU: done in 319 ms; outu0_a118 13726 30738 24888124 210056 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:52:20][354360418053583][320 ms][DEBUG] targetPkg: running [2025-08-22 16:52:20][354360418053583][320 ms][DEBUG] END check_scloud in 319 ms [2025-08-22 16:52:20][354360418053583][321 ms][DEBUG] START check_boot_completed [2025-08-22 16:52:20][354360418053583][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:52:20][354360418053583][367 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:52:20][354360418053583][367 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:52:20][354360418053583][415 ms][DEBUG] SU: done in 49 ms; out [2025-08-22 16:52:20][354360418053583][415 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 16:52:20][354360418053583][415 ms][DEBUG] START check_internet [2025-08-22 16:52:20][354360418053583][415 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:52:20][354360418053583][835 ms][DEBUG] SU: done in 420 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=153 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 153.678/153.678/153.678/0.000 ms\n [2025-08-22 16:52:20][354360418053583][836 ms][DEBUG] check_internet: online [2025-08-22 16:52:20][354360418053583][836 ms][DEBUG] END check_internet in 420 ms [2025-08-22 16:52:20][354360418053583][836 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:52:20][354360418053583][836 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418053583\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4475\"}'\'' -e'"" [2025-08-22 16:52:20][354360418053583][836 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:52:20][354360418053583][836 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418053583\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4475\"}'\'' -e'"" [2025-08-22 16:52:24][354360418053583][4772 ms][DEBUG] frida res:res:{"code":4030105,"message":"USER_IS_NOT_ACTIVE","data":"User is not active in KME."}\r\n [2025-08-22 16:52:25][354360418053583][4928 ms][DEBUG] proc_open done in 4092 ms; code=255; res.len=83 [2025-08-22 16:52:25][354360418053583][4928 ms][DEBUG] END runCmdUntilRes#1 in 4092 ms [2025-08-22 16:52:25][354360418053583][4928 ms][INFO] SUCCESS response from frida (len=83) [2025-08-22 16:52:25][][0 ms][INFO] === Request start === [2025-08-22 16:52:25][][1 ms][DEBUG] START check_scloud [2025-08-22 16:52:25][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:52:25][][310 ms][DEBUG] SU: done in 309 ms; outu0_a118 13726 30738 25026500 222036 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:52:25][][311 ms][DEBUG] targetPkg: running [2025-08-22 16:52:25][][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 16:52:25][][311 ms][DEBUG] START check_boot_completed [2025-08-22 16:52:25][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:52:25][][357 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:52:25][][357 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:52:25][][420 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:52:25][][420 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:52:25][][420 ms][DEBUG] START check_internet [2025-08-22 16:52:25][][420 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:52:26][][669 ms][DEBUG] SU: done in 249 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=151 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 151.128/151.128/151.128/0.000 ms\n [2025-08-22 16:52:26][][670 ms][DEBUG] check_internet: online [2025-08-22 16:52:26][][670 ms][DEBUG] END check_internet in 250 ms [2025-08-22 16:52:26][][670 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:52:26][][670 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5063\"}'\'' -e'"" [2025-08-22 16:52:26][][670 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:52:26][][670 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC5063\"}'\'' -e'"" [2025-08-22 16:52:29][][4434 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:52:30][][4590 ms][DEBUG] proc_open done in 3921 ms; code=255; res.len=107 [2025-08-22 16:52:30][][4590 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-22 16:52:30][][4590 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:52:30][][0 ms][INFO] === Request start === [2025-08-22 16:52:30][][0 ms][DEBUG] START check_scloud [2025-08-22 16:52:30][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:52:30][][254 ms][DEBUG] SU: done in 254 ms; outu0_a118 13726 30738 25160908 233224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:52:30][][254 ms][DEBUG] targetPkg: running [2025-08-22 16:52:30][][254 ms][DEBUG] END check_scloud in 254 ms [2025-08-22 16:52:30][][254 ms][DEBUG] START check_boot_completed [2025-08-22 16:52:30][][254 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:52:30][][300 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:52:30][][300 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:52:30][][347 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:52:30][][347 ms][DEBUG] END check_boot_completed in 92 ms [2025-08-22 16:52:30][][347 ms][DEBUG] START check_internet [2025-08-22 16:52:30][][347 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:52:30][][581 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=140 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 140.405/140.405/140.405/0.000 ms\n [2025-08-22 16:52:30][][581 ms][DEBUG] check_internet: online [2025-08-22 16:52:30][][581 ms][DEBUG] END check_internet in 235 ms [2025-08-22 16:52:30][][582 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:52:30][][582 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5984\"}'\'' -e'"" [2025-08-22 16:52:30][][582 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:52:30][][582 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5984\"}'\'' -e'"" [2025-08-22 16:52:38][][8454 ms][DEBUG] proc_open done in 7872 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 16:52:38][][8454 ms][DEBUG] END runCmdUntilRes#1 in 7873 ms [2025-08-22 16:52:38][][8454 ms][WARN] Detected error: Process with pid 13726 either refused to load frida-agent, or terminated during injection [2025-08-22 16:52:38][][8454 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 16:52:38][][8657 ms][DEBUG] SU: done in 203 ms; out [2025-08-22 16:52:38][][8658 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 16:52:38][][8658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:52:39][][8892 ms][DEBUG] SU: done in 234 ms; out [2025-08-22 16:52:39][][8892 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:52:39][][9173 ms][DEBUG] SU: done in 281 ms; out [2025-08-22 16:52:41][][11188 ms][DEBUG] START check_boot_completed [2025-08-22 16:52:41][][11188 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:52:41][][11235 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:52:41][][11235 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:52:41][][11297 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:52:41][][11297 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:52:44][][14312 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 16:52:44][][14312 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A137F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5984\"}'\'' -e'"" [2025-08-22 16:52:46][][15906 ms][DEBUG] proc_open done in 1593 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-22 16:52:46][][15906 ms][DEBUG] END runCmdUntilRes#2 in 1594 ms [2025-08-22 16:52:46][][15906 ms][WARN] Detected error 2; Reboot the device [2025-08-22 16:52:46][][15906 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 16:52:46][][16499 ms][DEBUG] SU: done in 593 ms; out [2025-08-22 16:52:58][][0 ms][INFO] === Request start === [2025-08-22 16:52:58][][1 ms][DEBUG] START check_scloud [2025-08-22 16:52:58][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:52:58][][49 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 16:52:58][][49 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:52:58][][49 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:52:58][][81 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:52:58][][81 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:52:58][][112 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:53:00][][2127 ms][DEBUG] END check_scloud in 2126 ms [2025-08-22 16:53:00][][2127 ms][DEBUG] START check_boot_completed [2025-08-22 16:53:00][][2127 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:53:06][350362537033938][1 ms][INFO] === Request start === [2025-08-22 16:53:06][350362537033938][1 ms][DEBUG] START check_scloud [2025-08-22 16:53:06][350362537033938][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:53:06][350362537033938][32 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:53:06][350362537033938][32 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:53:06][350362537033938][32 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:53:06][350362537033938][64 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:53:06][350362537033938][64 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:53:06][350362537033938][95 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:53:09][350362537033938][2110 ms][DEBUG] END check_scloud in 2108 ms [2025-08-22 16:53:09][350362537033938][2110 ms][DEBUG] START check_boot_completed [2025-08-22 16:53:09][350362537033938][2110 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:53:14][355296341186976][1 ms][INFO] === Request start === [2025-08-22 16:53:31][355296341186976][0 ms][INFO] === Request start === [2025-08-22 16:53:48][355296341186976][16249 ms][DEBUG] START check_scloud [2025-08-22 16:53:48][355296341186976][16249 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:53:48][355296341186976][16546 ms][DEBUG] SU: done in 297 ms; out [2025-08-22 16:53:48][355296341186976][16546 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:53:48][355296341186976][16546 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:53:48][355296341186976][16671 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:53:48][355296341186976][16671 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:53:48][355296341186976][16827 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:53:49][350362537033938][0 ms][INFO] === Request start === [2025-08-22 16:53:50][355296341186976][18842 ms][DEBUG] END check_scloud in 2593 ms [2025-08-22 16:53:50][355296341186976][18843 ms][DEBUG] START check_boot_completed [2025-08-22 16:53:50][355296341186976][18843 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:53:51][354360418053583][0 ms][INFO] === Request start === [2025-08-22 16:53:51][354360418053583][0 ms][DEBUG] START check_scloud [2025-08-22 16:53:51][354360418053583][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:53:51][354360418053583][33 ms][DEBUG] SU: done in 32 ms; out [2025-08-22 16:53:51][354360418053583][33 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:53:51][354360418053583][33 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:53:51][354360418053583][64 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:53:51][354360418053583][64 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:53:51][354360418053583][95 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:53:52][355296341186976][20902 ms][DEBUG] ADB: done in 2060 ms; out [2025-08-22 16:53:52][355296341186976][20903 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:53:52][355296341186976][20965 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:53:52][355296341186976][20965 ms][DEBUG] END check_boot_completed in 2122 ms [2025-08-22 16:53:52][355296341186976][20965 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:53:52][355296341186976][20965 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296341186976\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XC02AZRJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9856\"}'\'' -e'"" [2025-08-22 16:53:52][355296341186976][20965 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:53:52][355296341186976][20965 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355296341186976\",\"model\":\"SM-A155M\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8XC02AZRJ\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC9856\"}'\'' -e'"" [2025-08-22 16:53:53][354360418053583][2110 ms][DEBUG] END check_scloud in 2110 ms [2025-08-22 16:53:53][354360418053583][2110 ms][DEBUG] START check_boot_completed [2025-08-22 16:53:53][354360418053583][2110 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:53:53][354360418053583][2142 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:53:53][354360418053583][2142 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:53:53][354360418053583][2188 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:53:53][354360418053583][2188 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:53:53][354360418053583][2188 ms][DEBUG] rawBody.length=1160 [2025-08-22 16:53:53][354360418053583][2188 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418053583\",\"model\":\"SM-A137F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2956\"}'\'' -e'"" [2025-08-22 16:53:53][354360418053583][2188 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:53:53][354360418053583][2188 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418053583\",\"model\":\"SM-A137F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2956\"}'\'' -e'"" [2025-08-22 16:53:54][355296341186976][22683 ms][DEBUG] proc_open done in 1718 ms (timeout); code=4; out.len=0 err.len=135 [2025-08-22 16:53:54][355296341186976][22683 ms][DEBUG] END runCmdUntilRes#1 in 1719 ms [2025-08-22 16:53:54][355296341186976][22683 ms][ERROR] NO RESULT; code=124 outUnable to access process with pid 5394 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root errUnable to access process with pid 5394 due to system restrictions; try `sudo sysctl kernel.yama.ptrace_scope=0`, or run Frida as root\r\n [2025-08-22 16:53:55][350362537033938][6090 ms][DEBUG] START check_scloud [2025-08-22 16:53:55][350362537033938][6090 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:53:55][350362537033938][6465 ms][DEBUG] SU: done in 375 ms; out [2025-08-22 16:53:55][350362537033938][6465 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:53:55][350362537033938][6465 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:53:56][350362537033938][6621 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 16:53:56][350362537033938][6621 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:53:56][][0 ms][INFO] === Request start === [2025-08-22 16:53:56][350362537033938][7105 ms][DEBUG] SU: done in 484 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:53:56][354360418053583][5172 ms][DEBUG] proc_open done in 2984 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 16:53:56][354360418053583][5173 ms][DEBUG] END runCmdUntilRes#1 in 2984 ms [2025-08-22 16:53:56][354360418053583][5173 ms][WARN] Detected error: Process not found [2025-08-22 16:53:56][354360418053583][5173 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 16:53:57][354360418053583][5766 ms][DEBUG] SU: done in 593 ms; out [2025-08-22 16:53:57][354360418053583][5766 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 16:53:57][354360418053583][5766 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:53:57][354360418053583][6031 ms][DEBUG] SU: done in 265 ms; out [2025-08-22 16:53:57][354360418053583][6032 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:53:57][354360418053583][6469 ms][DEBUG] SU: done in 437 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:53:58][350362537033938][9120 ms][DEBUG] END check_scloud in 3030 ms [2025-08-22 16:53:58][350362537033938][9120 ms][DEBUG] START check_boot_completed [2025-08-22 16:53:58][350362537033938][9120 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:53:58][350362537033938][9167 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:53:58][350362537033938][9167 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:53:58][350362537033938][9339 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 16:53:58][350362537033938][9339 ms][DEBUG] END check_boot_completed in 219 ms [2025-08-22 16:53:58][350362537033938][9339 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:53:58][350362537033938][9339 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362537033938\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXB11N53W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1608\"}'\'' -e'"" [2025-08-22 16:53:58][350362537033938][9339 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:53:58][350362537033938][9339 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350362537033938\",\"model\":\"SM-A065F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R8YXB11N53W\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"AFB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1608\"}'\'' -e'"" [2025-08-22 16:53:59][354360418053583][8484 ms][DEBUG] START check_boot_completed [2025-08-22 16:53:59][354360418053583][8484 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:53:59][354360418053583][8531 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:53:59][354360418053583][8531 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:00][354360418053583][8672 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 16:54:00][354360418053583][8673 ms][DEBUG] END check_boot_completed in 189 ms [2025-08-22 16:54:03][354360418053583][11686 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 16:54:03][354360418053583][11686 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354360418053583\",\"model\":\"SM-A137F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8TC0E3WSP\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2956\"}'\'' -e'"" [2025-08-22 16:54:07][350362537033938][17931 ms][DEBUG] frida res:res:{"code":4030105,"message":"USER_IS_NOT_ACTIVE","data":"User is not active in KME."}\r\n [2025-08-22 16:54:07][350362537033938][18087 ms][DEBUG] proc_open done in 8747 ms; code=255; res.len=83 [2025-08-22 16:54:07][350362537033938][18087 ms][DEBUG] END runCmdUntilRes#1 in 8748 ms [2025-08-22 16:54:07][350362537033938][18087 ms][INFO] SUCCESS response from frida (len=83) [2025-08-22 16:54:07][][0 ms][INFO] === Request start === [2025-08-22 16:54:09][354360418053583][17794 ms][DEBUG] frida res:res:{"code":4030105,"message":"USER_IS_NOT_ACTIVE","data":"User is not active in KME."}\r\n [2025-08-22 16:54:09][354360418053583][17950 ms][DEBUG] proc_open done in 6264 ms; code=255; res.len=83 [2025-08-22 16:54:09][354360418053583][17950 ms][DEBUG] END runCmdUntilRes#2 in 6264 ms [2025-08-22 16:54:09][354360418053583][17950 ms][INFO] SUCCESS response from frida (len=83) [2025-08-22 16:54:09][][0 ms][INFO] === Request start === [2025-08-22 16:54:09][][1 ms][DEBUG] START check_scloud [2025-08-22 16:54:09][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:10][][428 ms][DEBUG] SU: done in 427 ms; out [2025-08-22 16:54:10][][428 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:10][][429 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:10][][741 ms][DEBUG] SU: done in 312 ms; out [2025-08-22 16:54:10][][741 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:10][][991 ms][DEBUG] SU: done in 250 ms; out [2025-08-22 16:54:12][][3006 ms][DEBUG] END check_scloud in 3005 ms [2025-08-22 16:54:12][][3006 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:12][][3006 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:12][][3053 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:12][][3053 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:12][][3101 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 16:54:12][][3101 ms][DEBUG] END check_boot_completed in 95 ms [2025-08-22 16:54:12][][3101 ms][DEBUG] START check_internet [2025-08-22 16:54:12][][3101 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:12][][3209 ms][DEBUG] SU: done in 107 ms; out [2025-08-22 16:54:12][][3209 ms][WARN] check_internet: offline [2025-08-22 16:54:12][][3209 ms][DEBUG] END check_internet in 108 ms [2025-08-22 16:54:13][][0 ms][INFO] === Request start === [2025-08-22 16:54:13][][1 ms][DEBUG] START check_scloud [2025-08-22 16:54:13][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:13][][261 ms][DEBUG] SU: done in 260 ms; out [2025-08-22 16:54:13][][261 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:13][][261 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:13][][386 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:13][][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:13][][511 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:13][][6081 ms][DEBUG] START check_scloud [2025-08-22 16:54:13][][6081 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:14][][6346 ms][DEBUG] SU: done in 265 ms; out [2025-08-22 16:54:14][][6346 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:14][][6346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:14][][6456 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 16:54:14][][6456 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:14][][6596 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 16:54:14][][0 ms][INFO] === Request start === [2025-08-22 16:54:15][][2526 ms][DEBUG] END check_scloud in 2525 ms [2025-08-22 16:54:15][][2526 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:15][][2526 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:15][][2572 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:15][][2572 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:15][][2619 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:54:15][][2619 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:54:15][][2619 ms][DEBUG] START check_internet [2025-08-22 16:54:15][][2619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:15][][2729 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 16:54:15][][2729 ms][WARN] check_internet: offline [2025-08-22 16:54:15][][2729 ms][DEBUG] END check_internet in 110 ms [2025-08-22 16:54:16][][8611 ms][DEBUG] END check_scloud in 2531 ms [2025-08-22 16:54:16][][8611 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:16][][8611 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:16][][8658 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:16][][8658 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:16][][8705 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:54:16][][8705 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:54:16][][8705 ms][DEBUG] START check_internet [2025-08-22 16:54:16][][8705 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:16][][2020 ms][DEBUG] START check_scloud [2025-08-22 16:54:16][][2020 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:16][][8814 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 16:54:16][][8814 ms][WARN] check_internet: offline [2025-08-22 16:54:16][][8814 ms][DEBUG] END check_internet in 109 ms [2025-08-22 16:54:16][][2255 ms][DEBUG] SU: done in 234 ms; out [2025-08-22 16:54:16][][2255 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:16][][2255 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:16][][2380 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:16][][2380 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:17][][2520 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 16:54:17][][0 ms][INFO] === Request start === [2025-08-22 16:54:17][][1 ms][DEBUG] START check_scloud [2025-08-22 16:54:17][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:17][][276 ms][DEBUG] SU: done in 275 ms; out [2025-08-22 16:54:17][][276 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:17][][276 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:17][][401 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:17][][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:18][][557 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 16:54:18][][0 ms][INFO] === Request start === [2025-08-22 16:54:19][][4535 ms][DEBUG] END check_scloud in 2515 ms [2025-08-22 16:54:19][][4535 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:19][][4535 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:19][][4582 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:19][][4582 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:19][][4645 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:54:19][][4645 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 16:54:19][][4645 ms][DEBUG] START check_internet [2025-08-22 16:54:19][][4645 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:19][][4770 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:19][][4770 ms][WARN] check_internet: offline [2025-08-22 16:54:19][][4770 ms][DEBUG] END check_internet in 125 ms [2025-08-22 16:54:19][][1012 ms][DEBUG] START check_scloud [2025-08-22 16:54:19][][1012 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:19][][1341 ms][DEBUG] SU: done in 328 ms; out [2025-08-22 16:54:19][][1341 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:19][][1341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:19][][1481 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 16:54:19][][1481 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:19][][1622 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 16:54:20][][2572 ms][DEBUG] END check_scloud in 2571 ms [2025-08-22 16:54:20][][2572 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:20][][2572 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:20][][2603 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:54:20][][2604 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:20][][2682 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 16:54:20][][2682 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 16:54:20][][2682 ms][DEBUG] START check_internet [2025-08-22 16:54:20][][2682 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:20][][2807 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:20][][2807 ms][WARN] check_internet: offline [2025-08-22 16:54:20][][2807 ms][DEBUG] END check_internet in 125 ms [2025-08-22 16:54:21][][0 ms][INFO] === Request start === [2025-08-22 16:54:21][][1 ms][DEBUG] START check_scloud [2025-08-22 16:54:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:21][][296 ms][DEBUG] SU: done in 295 ms; out [2025-08-22 16:54:21][][296 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:21][][296 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:21][][499 ms][DEBUG] SU: done in 203 ms; out [2025-08-22 16:54:21][][499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:21][][764 ms][DEBUG] SU: done in 265 ms; out [2025-08-22 16:54:21][][3637 ms][DEBUG] END check_scloud in 2624 ms [2025-08-22 16:54:21][][3637 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:21][][3637 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:22][][0 ms][INFO] === Request start === [2025-08-22 16:54:22][][3684 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:22][][3684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:22][][3746 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:54:22][][3746 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 16:54:22][][3746 ms][DEBUG] START check_internet [2025-08-22 16:54:22][][3746 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:22][][3887 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 16:54:22][][3887 ms][WARN] check_internet: offline [2025-08-22 16:54:22][][3887 ms][DEBUG] END check_internet in 141 ms [2025-08-22 16:54:23][][1012 ms][DEBUG] START check_scloud [2025-08-22 16:54:23][][1012 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:23][][1293 ms][DEBUG] SU: done in 281 ms; out [2025-08-22 16:54:23][][1293 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:23][][1293 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:23][][1434 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 16:54:23][][1434 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:23][][1574 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 16:54:23][][2779 ms][DEBUG] END check_scloud in 2779 ms [2025-08-22 16:54:23][][2779 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:23][][2780 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:23][][2826 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:23][][2827 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:23][][2889 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:54:23][][2889 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:54:23][][2889 ms][DEBUG] START check_internet [2025-08-22 16:54:23][][2889 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:23][][0 ms][INFO] === Request start === [2025-08-22 16:54:24][][3014 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:24][][3014 ms][WARN] check_internet: offline [2025-08-22 16:54:24][][3014 ms][DEBUG] END check_internet in 125 ms [2025-08-22 16:54:24][][1007 ms][DEBUG] START check_scloud [2025-08-22 16:54:24][][1008 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:25][][1320 ms][DEBUG] SU: done in 313 ms; out [2025-08-22 16:54:25][][1320 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:25][][1320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:25][][1477 ms][DEBUG] SU: done in 157 ms; out [2025-08-22 16:54:25][][1477 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:25][][3590 ms][DEBUG] END check_scloud in 2577 ms [2025-08-22 16:54:25][][3590 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:25][][3590 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:25][][1695 ms][DEBUG] SU: done in 217 ms; out [2025-08-22 16:54:25][][3637 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:25][][3637 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:25][][3699 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:54:25][][3699 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:54:25][][3699 ms][DEBUG] START check_internet [2025-08-22 16:54:25][][3699 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:25][][0 ms][INFO] === Request start === [2025-08-22 16:54:25][][3793 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 16:54:25][][3793 ms][WARN] check_internet: offline [2025-08-22 16:54:25][][3793 ms][DEBUG] END check_internet in 94 ms [2025-08-22 16:54:26][][1015 ms][DEBUG] START check_scloud [2025-08-22 16:54:26][][1016 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:27][][1281 ms][DEBUG] SU: done in 266 ms; out [2025-08-22 16:54:27][][1281 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:27][][1281 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:27][][1407 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:27][][1407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:27][][1562 ms][DEBUG] SU: done in 155 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:54:27][][3710 ms][DEBUG] END check_scloud in 2702 ms [2025-08-22 16:54:27][][3710 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:27][][3710 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:27][][3757 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:27][][3757 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:27][][3835 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 16:54:27][][3835 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 16:54:27][][3835 ms][DEBUG] START check_internet [2025-08-22 16:54:27][][3835 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:27][355296341186976][0 ms][INFO] === Request start === [2025-08-22 16:54:27][][3991 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 16:54:27][][3991 ms][WARN] check_internet: offline [2025-08-22 16:54:27][][3991 ms][DEBUG] END check_internet in 156 ms [2025-08-22 16:54:28][355296341186976][1003 ms][DEBUG] START check_scloud [2025-08-22 16:54:28][355296341186976][1003 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:29][355296341186976][1394 ms][DEBUG] SU: done in 391 ms; out [2025-08-22 16:54:29][355296341186976][1394 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:29][355296341186976][1394 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:29][][3577 ms][DEBUG] END check_scloud in 2562 ms [2025-08-22 16:54:29][][3577 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:29][][3577 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:29][][3609 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:54:29][][3609 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:29][355296341186976][1581 ms][DEBUG] SU: done in 187 ms; out [2025-08-22 16:54:29][355296341186976][1581 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:29][][3687 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 16:54:29][][3687 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:54:29][][3687 ms][DEBUG] START check_internet [2025-08-22 16:54:29][][3687 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:29][][0 ms][INFO] === Request start === [2025-08-22 16:54:29][][3890 ms][DEBUG] SU: done in 203 ms; out [2025-08-22 16:54:29][][3890 ms][WARN] check_internet: offline [2025-08-22 16:54:29][][3890 ms][DEBUG] END check_internet in 203 ms [2025-08-22 16:54:29][355296341186976][1815 ms][DEBUG] SU: done in 235 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:54:30][][1013 ms][DEBUG] START check_scloud [2025-08-22 16:54:30][][1013 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:30][][1294 ms][DEBUG] SU: done in 281 ms; out [2025-08-22 16:54:30][][1294 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:30][][1294 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:31][][1419 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:31][][1419 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:31][][1622 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:54:31][355296341186976][3830 ms][DEBUG] END check_scloud in 2827 ms [2025-08-22 16:54:31][355296341186976][3830 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:31][355296341186976][3830 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:31][355296341186976][3861 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:54:31][355296341186976][3861 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:31][355296341186976][3908 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:54:31][355296341186976][3908 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:54:31][355296341186976][3908 ms][DEBUG] START check_internet [2025-08-22 16:54:31][355296341186976][3908 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:31][355296341186976][4033 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 16:54:31][355296341186976][4033 ms][WARN] check_internet: offline [2025-08-22 16:54:31][355296341186976][4033 ms][DEBUG] END check_internet in 125 ms [2025-08-22 16:54:33][][3637 ms][DEBUG] END check_scloud in 2624 ms [2025-08-22 16:54:33][][3637 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:33][][3638 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:33][][3684 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:33][][3684 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:33][][3747 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:54:33][][3747 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 16:54:33][][3747 ms][DEBUG] START check_internet [2025-08-22 16:54:33][][3747 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:33][355296341186976][0 ms][INFO] === Request start === [2025-08-22 16:54:33][][3981 ms][DEBUG] SU: done in 234 ms; out [2025-08-22 16:54:33][][3981 ms][WARN] check_internet: offline [2025-08-22 16:54:33][][3981 ms][DEBUG] END check_internet in 234 ms [2025-08-22 16:54:34][355296341186976][1011 ms][DEBUG] START check_scloud [2025-08-22 16:54:34][355296341186976][1011 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:34][355296341186976][1417 ms][DEBUG] SU: done in 406 ms; out [2025-08-22 16:54:34][355296341186976][1418 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:34][355296341186976][1418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:35][355296341186976][1605 ms][DEBUG] SU: done in 187 ms; out [2025-08-22 16:54:35][355296341186976][1605 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:35][355296341186976][1933 ms][DEBUG] SU: done in 328 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:54:36][350362537033938][0 ms][INFO] === Request start === [2025-08-22 16:54:36][350362537033938][1 ms][DEBUG] START check_scloud [2025-08-22 16:54:36][350362537033938][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:37][350362537033938][455 ms][DEBUG] SU: done in 454 ms; out [2025-08-22 16:54:37][350362537033938][455 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:37][350362537033938][455 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:37][355296341186976][3948 ms][DEBUG] END check_scloud in 2937 ms [2025-08-22 16:54:37][355296341186976][3948 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:37][355296341186976][3948 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:37][355296341186976][3995 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:37][355296341186976][3995 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:37][350362537033938][672 ms][DEBUG] SU: done in 217 ms; out [2025-08-22 16:54:37][350362537033938][672 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:37][355296341186976][4057 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:54:37][355296341186976][4057 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:54:37][355296341186976][4057 ms][DEBUG] START check_internet [2025-08-22 16:54:37][355296341186976][4057 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:37][355296341186976][4229 ms][DEBUG] SU: done in 172 ms; out [2025-08-22 16:54:37][355296341186976][4229 ms][WARN] check_internet: offline [2025-08-22 16:54:37][355296341186976][4229 ms][DEBUG] END check_internet in 172 ms [2025-08-22 16:54:37][350362537033938][923 ms][DEBUG] SU: done in 251 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:54:39][][0 ms][INFO] === Request start === [2025-08-22 16:54:39][350362537033938][2937 ms][DEBUG] END check_scloud in 2936 ms [2025-08-22 16:54:39][350362537033938][2937 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:39][350362537033938][2937 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:39][350362537033938][2984 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:39][350362537033938][2984 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:39][350362537033938][3078 ms][DEBUG] SU: done in 94 ms; out [2025-08-22 16:54:39][350362537033938][3078 ms][DEBUG] END check_boot_completed in 141 ms [2025-08-22 16:54:39][350362537033938][3078 ms][DEBUG] START check_internet [2025-08-22 16:54:39][350362537033938][3078 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:40][350362537033938][3280 ms][DEBUG] SU: done in 203 ms; out [2025-08-22 16:54:40][350362537033938][3281 ms][WARN] check_internet: offline [2025-08-22 16:54:40][350362537033938][3281 ms][DEBUG] END check_internet in 203 ms [2025-08-22 16:54:40][][1016 ms][DEBUG] START check_scloud [2025-08-22 16:54:40][][1016 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:40][][1422 ms][DEBUG] SU: done in 406 ms; out [2025-08-22 16:54:40][][1422 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:40][][1422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:41][][1703 ms][DEBUG] SU: done in 281 ms; out [2025-08-22 16:54:41][][1703 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:41][][1969 ms][DEBUG] SU: done in 265 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:54:41][350362537033938][0 ms][INFO] === Request start === [2025-08-22 16:54:41][350362537033938][0 ms][DEBUG] START check_scloud [2025-08-22 16:54:41][350362537033938][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:42][350362537033938][418 ms][DEBUG] SU: done in 417 ms; out [2025-08-22 16:54:42][350362537033938][418 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:42][350362537033938][418 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:42][350362537033938][558 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 16:54:42][350362537033938][559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:42][350362537033938][777 ms][DEBUG] SU: done in 218 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:54:43][][3984 ms][DEBUG] END check_scloud in 2968 ms [2025-08-22 16:54:43][][3984 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:43][][3984 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:43][][4031 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:43][][4031 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:43][][4093 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:54:43][][4093 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:54:43][][4093 ms][DEBUG] START check_internet [2025-08-22 16:54:43][][4093 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:43][][4360 ms][DEBUG] SU: done in 267 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=129 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 129.845/129.845/129.845/0.000 ms\n [2025-08-22 16:54:43][][4361 ms][DEBUG] check_internet: online [2025-08-22 16:54:43][][4361 ms][DEBUG] END check_internet in 268 ms [2025-08-22 16:54:43][][4361 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:54:43][][4361 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RX8XC02AZRJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1271\"}'\'' -e'"" [2025-08-22 16:54:43][][4361 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:54:43][][4361 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RX8XC02AZRJ\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1271\"}'\'' -e'"" [2025-08-22 16:54:44][][4999 ms][DEBUG] proc_open done in 638 ms (timeout); code=4; out.len=0 err.len=50 [2025-08-22 16:54:44][][5000 ms][DEBUG] END runCmdUntilRes#1 in 639 ms [2025-08-22 16:54:44][][5000 ms][WARN] Detected system_server; Reboot the device [2025-08-22 16:54:44][][5000 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 16:54:44][350362537033938][2792 ms][DEBUG] END check_scloud in 2792 ms [2025-08-22 16:54:44][350362537033938][2792 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:44][350362537033938][2792 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:44][350362537033938][2839 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:54:44][350362537033938][2839 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:54:44][350362537033938][2902 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:54:44][350362537033938][2902 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 16:54:44][350362537033938][2902 ms][DEBUG] START check_internet [2025-08-22 16:54:44][350362537033938][2902 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:54:44][350362537033938][3011 ms][DEBUG] SU: done in 109 ms; out [2025-08-22 16:54:44][350362537033938][3011 ms][WARN] check_internet: offline [2025-08-22 16:54:44][350362537033938][3011 ms][DEBUG] END check_internet in 109 ms [2025-08-22 16:54:45][][6280 ms][DEBUG] SU: done in 1280 ms; out [2025-08-22 16:54:46][][0 ms][INFO] === Request start === [2025-08-22 16:54:55][][9129 ms][DEBUG] START check_scloud [2025-08-22 16:54:55][][9129 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:55][][9176 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:54:55][][9176 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:55][][9176 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:56][][9207 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:54:56][][9207 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:56][][9238 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:54:57][][1 ms][INFO] === Request start === [2025-08-22 16:54:57][][1 ms][DEBUG] START check_scloud [2025-08-22 16:54:57][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:54:57][][46 ms][DEBUG] SU: done in 45 ms; out [2025-08-22 16:54:57][][46 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:54:57][][46 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:54:57][][78 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:54:57][][78 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:54:57][][109 ms][DEBUG] SU: done in 31 ms; out [2025-08-22 16:54:58][][11253 ms][DEBUG] END check_scloud in 2124 ms [2025-08-22 16:54:58][][11253 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:58][][11253 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:54:59][][2124 ms][DEBUG] END check_scloud in 2123 ms [2025-08-22 16:54:59][][2124 ms][DEBUG] START check_boot_completed [2025-08-22 16:54:59][][2124 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:55:08][351088371974346][1 ms][INFO] === Request start === [2025-08-22 16:55:27][351088371974346][0 ms][INFO] === Request start === [2025-08-22 16:55:40][][1 ms][INFO] === Request start === [2025-08-22 16:55:45][][5072 ms][DEBUG] START check_scloud [2025-08-22 16:55:45][][5072 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:55:46][][5401 ms][DEBUG] SU: done in 328 ms; out [2025-08-22 16:55:46][][5401 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:55:46][][5401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:55:46][][5651 ms][DEBUG] SU: done in 250 ms; out [2025-08-22 16:55:46][][5651 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:55:46][][6010 ms][DEBUG] SU: done in 359 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:55:47][][1 ms][INFO] === Request start === [2025-08-22 16:55:47][][1 ms][DEBUG] START check_scloud [2025-08-22 16:55:47][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:55:47][][333 ms][DEBUG] SU: done in 332 ms; out [2025-08-22 16:55:47][][333 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:55:47][][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:55:47][][474 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 16:55:47][][474 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:55:48][][677 ms][DEBUG] SU: done in 203 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:55:48][][8025 ms][DEBUG] END check_scloud in 2953 ms [2025-08-22 16:55:48][][8025 ms][DEBUG] START check_boot_completed [2025-08-22 16:55:48][][8025 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:55:48][][8072 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:55:48][][8072 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:55:49][][8134 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:55:49][][8135 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 16:55:49][][8135 ms][DEBUG] rawBody.length=1130 [2025-08-22 16:55:49][][8135 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A065F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YXB11N53W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2736\"}'\'' -e'"" [2025-08-22 16:55:49][][8135 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:55:49][][8135 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A065F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YXB11N53W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2736\"}'\'' -e'"" [2025-08-22 16:55:50][][2692 ms][DEBUG] END check_scloud in 2690 ms [2025-08-22 16:55:50][][2692 ms][DEBUG] START check_boot_completed [2025-08-22 16:55:50][][2692 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:55:50][][2723 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:55:50][][2723 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:55:50][][2786 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:55:50][][2786 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:55:50][][2786 ms][DEBUG] rawBody.length=1130 [2025-08-22 16:55:50][][2786 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3384\"}'\'' -e'"" [2025-08-22 16:55:50][][2786 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:55:50][][2786 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3384\"}'\'' -e'"" [2025-08-22 16:56:01][][20156 ms][DEBUG] proc_open done in 12021 ms (timeout); code=0; out.len=0 err.len=11 [2025-08-22 16:56:01][][20156 ms][DEBUG] END runCmdUntilRes#1 in 12021 ms [2025-08-22 16:56:01][][20156 ms][ERROR] NO RESULT; code=124 out errtimeout 12s [2025-08-22 16:56:02][][14807 ms][DEBUG] proc_open done in 12021 ms (timeout); code=0; out.len=0 err.len=11 [2025-08-22 16:56:02][][14807 ms][DEBUG] END runCmdUntilRes#1 in 12021 ms [2025-08-22 16:56:02][][14807 ms][ERROR] NO RESULT; code=124 out errtimeout 12s [2025-08-22 16:56:05][][0 ms][INFO] === Request start === [2025-08-22 16:56:05][][1 ms][DEBUG] START check_scloud [2025-08-22 16:56:05][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:56:05][][320 ms][DEBUG] SU: done in 318 ms; out [2025-08-22 16:56:05][][320 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:56:05][][320 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:56:05][][507 ms][DEBUG] SU: done in 187 ms; out [2025-08-22 16:56:05][][507 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:56:06][][913 ms][DEBUG] SU: done in 406 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:56:06][][0 ms][INFO] === Request start === [2025-08-22 16:56:08][][2928 ms][DEBUG] END check_scloud in 2927 ms [2025-08-22 16:56:08][][2928 ms][DEBUG] START check_boot_completed [2025-08-22 16:56:08][][2928 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:56:08][][2975 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:56:08][][2975 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:56:08][][3038 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:56:08][][3038 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 16:56:08][][3038 ms][DEBUG] START check_internet [2025-08-22 16:56:08][][3038 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:56:08][][3460 ms][DEBUG] SU: done in 421 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=224 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 224.105/224.105/224.105/0.000 ms\n [2025-08-22 16:56:08][][3460 ms][DEBUG] check_internet: online [2025-08-22 16:56:08][][3460 ms][DEBUG] END check_internet in 422 ms [2025-08-22 16:56:08][][3460 ms][DEBUG] rawBody.length=1130 [2025-08-22 16:56:08][][3460 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A065F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YXB11N53W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3949\"}'\'' -e'"" [2025-08-22 16:56:08][][3460 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:56:08][][3460 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A065F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R8YXB11N53W\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"AFB\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3949\"}'\'' -e'"" [2025-08-22 16:56:15][][10052 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:56:15][][10208 ms][DEBUG] proc_open done in 6748 ms; code=255; res.len=107 [2025-08-22 16:56:15][][10208 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-08-22 16:56:15][][10208 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:56:15][][9135 ms][DEBUG] START check_scloud [2025-08-22 16:56:15][][9135 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:56:16][][9447 ms][DEBUG] SU: done in 312 ms; outu0_a118 9867 4973 23885920 125348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:56:16][][9447 ms][DEBUG] targetPkg: running [2025-08-22 16:56:16][][9447 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 16:56:16][][9447 ms][DEBUG] START check_boot_completed [2025-08-22 16:56:16][][9447 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:56:16][][9478 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:56:16][][9479 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:56:16][][9525 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:56:16][][9525 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:56:16][][9525 ms][DEBUG] START check_internet [2025-08-22 16:56:16][][9525 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:56:16][][9775 ms][DEBUG] SU: done in 250 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.416/142.416/142.416/0.000 ms\n [2025-08-22 16:56:16][][9776 ms][DEBUG] check_internet: online [2025-08-22 16:56:16][][9776 ms][DEBUG] END check_internet in 250 ms [2025-08-22 16:56:16][][9776 ms][DEBUG] rawBody.length=1130 [2025-08-22 16:56:16][][9776 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3384\"}'\'' -e'"" [2025-08-22 16:56:16][][9776 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:56:16][][9776 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3384\"}'\'' -e'"" [2025-08-22 16:56:21][][14384 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:56:21][][14540 ms][DEBUG] proc_open done in 4764 ms; code=255; res.len=107 [2025-08-22 16:56:21][][14540 ms][DEBUG] END runCmdUntilRes#1 in 4764 ms [2025-08-22 16:56:21][][14540 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:56:21][][0 ms][INFO] === Request start === [2025-08-22 16:56:21][][1 ms][DEBUG] START check_scloud [2025-08-22 16:56:21][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:56:21][][311 ms][DEBUG] SU: done in 310 ms; outu0_a118 9867 4973 24038632 119624 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:56:21][][311 ms][DEBUG] targetPkg: running [2025-08-22 16:56:21][][311 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 16:56:21][][311 ms][DEBUG] START check_boot_completed [2025-08-22 16:56:21][][311 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:56:21][][358 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:56:21][][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:56:21][][436 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 16:56:21][][436 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 16:56:21][][436 ms][DEBUG] START check_internet [2025-08-22 16:56:21][][436 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:56:22][][717 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.691/141.691/141.691/0.000 ms\n [2025-08-22 16:56:22][][717 ms][DEBUG] check_internet: online [2025-08-22 16:56:22][][717 ms][DEBUG] END check_internet in 281 ms [2025-08-22 16:56:22][][717 ms][DEBUG] rawBody.length=1130 [2025-08-22 16:56:22][][717 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3049\"}'\'' -e'"" [2025-08-22 16:56:22][][717 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:56:22][][717 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687970f3d6cf855f9dd393bf\",\"group\":\"3968e921-820e-4ca1-a579-29e5998ee7a5\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"sup@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3049\"}'\'' -e'"" [2025-08-22 16:56:26][][5341 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:56:27][][5497 ms][DEBUG] proc_open done in 4780 ms; code=255; res.len=107 [2025-08-22 16:56:27][][5497 ms][DEBUG] END runCmdUntilRes#1 in 4780 ms [2025-08-22 16:56:27][][5497 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:56:27][351088371974346][0 ms][INFO] === Request start === [2025-08-22 16:56:27][351088371974346][1 ms][DEBUG] START check_scloud [2025-08-22 16:56:27][351088371974346][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:56:28][351088371974346][328 ms][DEBUG] SU: done in 327 ms; outu0_a118 9867 4973 24219068 99424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:56:28][351088371974346][328 ms][DEBUG] targetPkg: running [2025-08-22 16:56:28][351088371974346][328 ms][DEBUG] END check_scloud in 327 ms [2025-08-22 16:56:28][351088371974346][328 ms][DEBUG] START check_boot_completed [2025-08-22 16:56:28][351088371974346][328 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:56:28][351088371974346][374 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:56:28][351088371974346][374 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:56:28][351088371974346][421 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:56:28][351088371974346][421 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:56:28][351088371974346][422 ms][DEBUG] START check_internet [2025-08-22 16:56:28][351088371974346][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:56:28][351088371974346][703 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=143 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 143.951/143.951/143.951/0.000 ms\n [2025-08-22 16:56:28][351088371974346][703 ms][DEBUG] check_internet: online [2025-08-22 16:56:28][351088371974346][703 ms][DEBUG] END check_internet in 281 ms [2025-08-22 16:56:28][351088371974346][703 ms][DEBUG] rawBody.length=1161 [2025-08-22 16:56:28][351088371974346][703 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088371974346\",\"model\":\"SM-M625F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-08-22 16:56:28][351088371974346][703 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:56:28][351088371974346][703 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351088371974346\",\"model\":\"SM-M625F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9230\"}'\'' -e'"" [2025-08-22 16:56:52][352288966212982][0 ms][INFO] === Request start === [2025-08-22 16:57:11][352288966212982][1 ms][INFO] === Request start === [2025-08-22 16:57:21][351088371974346][1 ms][INFO] === Request start === [2025-08-22 16:57:41][][0 ms][INFO] === Request start === [2025-08-22 16:57:53][][12077 ms][DEBUG] START check_scloud [2025-08-22 16:57:53][][12077 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:57:56][][14499 ms][DEBUG] SU: done in 2422 ms; out [2025-08-22 16:57:56][][14499 ms][WARN] targetPkg: not running, restarting [2025-08-22 16:57:56][][14499 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:57:56][][14858 ms][DEBUG] SU: done in 359 ms; out [2025-08-22 16:57:56][][14858 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:57:56][][15092 ms][DEBUG] SU: done in 234 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 16:57:58][][17108 ms][DEBUG] END check_scloud in 5031 ms [2025-08-22 16:57:58][][17108 ms][DEBUG] START check_boot_completed [2025-08-22 16:57:58][][17108 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:57:58][][17139 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 16:57:58][][17139 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:57:58][][17186 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 16:57:58][][17186 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 16:57:58][][17186 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:57:58][][17186 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1483\"}'\'' -e'"" [2025-08-22 16:57:58][][17186 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:57:58][][17186 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC1483\"}'\'' -e'"" [2025-08-22 16:58:04][][22530 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:58:04][][22686 ms][DEBUG] proc_open done in 5500 ms; code=255; res.len=107 [2025-08-22 16:58:04][][22686 ms][DEBUG] END runCmdUntilRes#1 in 5500 ms [2025-08-22 16:58:04][][22686 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:58:04][][0 ms][INFO] === Request start === [2025-08-22 16:58:04][][1 ms][DEBUG] START check_scloud [2025-08-22 16:58:04][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:58:04][][321 ms][DEBUG] SU: done in 320 ms; outu0_a118 21527 13349 23652576 123632 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:58:04][][321 ms][DEBUG] targetPkg: running [2025-08-22 16:58:04][][321 ms][DEBUG] END check_scloud in 320 ms [2025-08-22 16:58:04][][321 ms][DEBUG] START check_boot_completed [2025-08-22 16:58:04][][321 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:58:04][][368 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:58:04][][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:58:05][][430 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 16:58:05][][430 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 16:58:05][][431 ms][DEBUG] START check_internet [2025-08-22 16:58:05][][431 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:58:05][][711 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=137 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 137.060/137.060/137.060/0.000 ms\n [2025-08-22 16:58:05][][711 ms][DEBUG] check_internet: online [2025-08-22 16:58:05][][711 ms][DEBUG] END check_internet in 281 ms [2025-08-22 16:58:05][][711 ms][DEBUG] rawBody.length=1131 [2025-08-22 16:58:05][][712 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6219\"}'\'' -e'"" [2025-08-22 16:58:05][][712 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:58:05][][712 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-M625F\",\"profile_ID\":\"687a0a29260cc8197f6f4444\",\"group\":\"18f597c8-06f9-4e4e-be70-29bfa84c3bdc\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RQ8RA01QBJV\",\"scheme\":\"QR_CODE\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC6219\"}'\'' -e'"" [2025-08-22 16:58:09][][4874 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 16:58:09][352288966212982][1 ms][INFO] === Request start === [2025-08-22 16:58:09][][5031 ms][DEBUG] proc_open done in 4319 ms; code=255; res.len=107 [2025-08-22 16:58:09][][5031 ms][DEBUG] END runCmdUntilRes#1 in 4320 ms [2025-08-22 16:58:09][][5031 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 16:58:10][352288966212982][1009 ms][DEBUG] START check_scloud [2025-08-22 16:58:10][352288966212982][1009 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 16:58:10][352288966212982][1353 ms][DEBUG] SU: done in 344 ms; outu0_a118 21527 13349 23834088 126244 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 16:58:10][352288966212982][1353 ms][DEBUG] targetPkg: running [2025-08-22 16:58:10][352288966212982][1353 ms][DEBUG] END check_scloud in 344 ms [2025-08-22 16:58:10][352288966212982][1353 ms][DEBUG] START check_boot_completed [2025-08-22 16:58:10][352288966212982][1353 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:58:11][352288966212982][1400 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 16:58:11][352288966212982][1400 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:58:11][352288966212982][1447 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 16:58:11][352288966212982][1447 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 16:58:11][352288966212982][1447 ms][DEBUG] START check_internet [2025-08-22 16:58:11][352288966212982][1448 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 16:58:11][352288966212982][1681 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=123 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 123.492/123.492/123.492/0.000 ms\n [2025-08-22 16:58:11][352288966212982][1682 ms][DEBUG] check_internet: online [2025-08-22 16:58:11][352288966212982][1682 ms][DEBUG] END check_internet in 234 ms [2025-08-22 16:58:11][352288966212982][1682 ms][DEBUG] rawBody.length=1043 [2025-08-22 16:58:11][352288966212982][1682 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 16:58:11][352288966212982][1682 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 16:58:11][352288966212982][1682 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 16:58:12][352288966212982][3384 ms][DEBUG] proc_open done in 1702 ms (timeout); code=4; out.len=0 err.len=19 [2025-08-22 16:58:12][352288966212982][3384 ms][DEBUG] END runCmdUntilRes#1 in 1702 ms [2025-08-22 16:58:12][352288966212982][3384 ms][WARN] Detected error: Process not found [2025-08-22 16:58:12][352288966212982][3384 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 16:58:13][352288966212982][3618 ms][DEBUG] SU: done in 234 ms; out [2025-08-22 16:58:13][352288966212982][3619 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 16:58:13][352288966212982][3619 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 16:58:13][352288966212982][3883 ms][DEBUG] SU: done in 265 ms; out [2025-08-22 16:58:13][352288966212982][3883 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 16:58:14][352288966212982][4399 ms][DEBUG] SU: done in 516 ms; out [2025-08-22 16:58:16][352288966212982][6414 ms][DEBUG] START check_boot_completed [2025-08-22 16:58:16][352288966212982][6414 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 16:58:16][352288966212982][6461 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 16:58:16][352288966212982][6461 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 16:58:16][352288966212982][6524 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 16:58:16][352288966212982][6524 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 16:58:19][352288966212982][9538 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 16:58:19][352288966212982][9538 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 16:58:20][352288966212982][11069 ms][DEBUG] proc_open done in 1531 ms (timeout); code=4; out.len=0 err.len=1015 [2025-08-22 16:58:20][352288966212982][11070 ms][DEBUG] END runCmdUntilRes#2 in 1531 ms [2025-08-22 16:58:20][352288966212982][11070 ms][WARN] Detected error 2; Reboot the device [2025-08-22 16:58:20][352288966212982][11070 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c reboot" [2025-08-22 16:58:21][352288966212982][11694 ms][DEBUG] SU: done in 624 ms; out [2025-08-22 17:00:57][352288966212982][1 ms][INFO] === Request start === [2025-08-22 17:00:57][352288966212982][2 ms][DEBUG] START check_scloud [2025-08-22 17:00:57][352288966212982][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 17:01:03][352288966212982][5451 ms][DEBUG] SU: done in 5449 ms; out* daemon not running. starting it now at tcp:5037 *\n* daemon started successfully *\n [2025-08-22 17:01:03][352288966212982][5451 ms][WARN] targetPkg: not running, restarting [2025-08-22 17:01:03][352288966212982][5451 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 17:01:03][352288966212982][5576 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 17:01:03][352288966212982][5576 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 17:01:03][352288966212982][5763 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 17:01:05][352288966212982][7778 ms][DEBUG] END check_scloud in 7776 ms [2025-08-22 17:01:05][352288966212982][7778 ms][DEBUG] START check_boot_completed [2025-08-22 17:01:05][352288966212982][7778 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 17:01:05][352288966212982][7825 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 17:01:05][352288966212982][7825 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 17:01:05][352288966212982][7888 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 17:01:05][352288966212982][7888 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 17:01:05][352288966212982][7888 ms][DEBUG] rawBody.length=1043 [2025-08-22 17:01:05][352288966212982][7888 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 17:01:05][352288966212982][7888 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 17:01:05][352288966212982][7888 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"1984274702\",\"group\":\"8e4c63e5-2536-476a-8b5d-aaf86fbb2b12\",\"type\":\"KC\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 17:01:10][352288966212982][12184 ms][DEBUG] frida res:res:{"code":4030110,"message":"USER_INACTIVE_STATE","data":"USER_INACTIVE_STATE"}\r\n [2025-08-22 17:01:10][352288966212982][12340 ms][DEBUG] proc_open done in 4451 ms; code=255; res.len=77 [2025-08-22 17:01:10][352288966212982][12340 ms][DEBUG] END runCmdUntilRes#1 in 4452 ms [2025-08-22 17:01:10][352288966212982][12340 ms][INFO] SUCCESS response from frida (len=77) [2025-08-22 17:20:00][352288966212982][1 ms][INFO] === Request start === [2025-08-22 17:20:00][352288966212982][2 ms][DEBUG] START check_scloud [2025-08-22 17:20:00][352288966212982][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 17:20:05][352288966212982][5365 ms][DEBUG] SU: done in 5363 ms; out* daemon not running. starting it now at tcp:5037 *\n* daemon started successfully *\nu0_a118 15996 4970 23489296 120688 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 17:20:05][352288966212982][5365 ms][DEBUG] targetPkg: running [2025-08-22 17:20:05][352288966212982][5365 ms][DEBUG] END check_scloud in 5364 ms [2025-08-22 17:20:05][352288966212982][5365 ms][DEBUG] START check_boot_completed [2025-08-22 17:20:05][352288966212982][5365 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 17:20:05][352288966212982][5412 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 17:20:05][352288966212982][5412 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 17:20:05][352288966212982][5460 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 17:20:05][352288966212982][5460 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 17:20:05][352288966212982][5460 ms][DEBUG] START check_internet [2025-08-22 17:20:05][352288966212982][5460 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 17:20:06][352288966212982][5959 ms][DEBUG] SU: done in 499 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=141 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 141.769/141.769/141.769/0.000 ms\n [2025-08-22 17:20:06][352288966212982][5959 ms][DEBUG] check_internet: online [2025-08-22 17:20:06][352288966212982][5959 ms][DEBUG] END check_internet in 499 ms [2025-08-22 17:20:06][352288966212982][5959 ms][DEBUG] rawBody.length=1071 [2025-08-22 17:20:06][352288966212982][5959 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"68798efb5676d87288c4576f\",\"group\":\"13b57ec7-dd7d-487d-b7b4-d92c67d682fb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 17:20:06][352288966212982][5959 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 17:20:06][352288966212982][5959 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966212982\",\"model\":\"SM-A155F\",\"profile_ID\":\"68798efb5676d87288c4576f\",\"group\":\"13b57ec7-dd7d-487d-b7b4-d92c67d682fb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 17:20:18][352288966212982][17981 ms][DEBUG] proc_open done in 12022 ms (timeout); code=0; out.len=0 err.len=11 [2025-08-22 17:20:18][352288966212982][17981 ms][DEBUG] END runCmdUntilRes#1 in 12022 ms [2025-08-22 17:20:18][352288966212982][17981 ms][ERROR] NO RESULT; code=124 out errtimeout 12s [2025-08-22 17:20:23][352288966213238][0 ms][INFO] === Request start === [2025-08-22 17:20:23][352288966213238][1 ms][DEBUG] START check_scloud [2025-08-22 17:20:23][352288966213238][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 17:20:28][352288966213238][5404 ms][DEBUG] SU: done in 5403 ms; out* daemon not running. starting it now at tcp:5037 *\n* daemon started successfully *\nu0_a118 15996 4970 23656632 125720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 17:20:28][352288966213238][5404 ms][DEBUG] targetPkg: running [2025-08-22 17:20:28][352288966213238][5404 ms][DEBUG] END check_scloud in 5403 ms [2025-08-22 17:20:28][352288966213238][5404 ms][DEBUG] START check_boot_completed [2025-08-22 17:20:28][352288966213238][5404 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 17:20:28][352288966213238][5435 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 17:20:28][352288966213238][5435 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 17:20:28][352288966213238][5482 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 17:20:28][352288966213238][5482 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 17:20:28][352288966213238][5482 ms][DEBUG] START check_internet [2025-08-22 17:20:28][352288966213238][5482 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 17:20:29][352288966213238][5810 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=216 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 216.543/216.543/216.543/0.000 ms\n [2025-08-22 17:20:29][352288966213238][5810 ms][DEBUG] check_internet: online [2025-08-22 17:20:29][352288966213238][5810 ms][DEBUG] END check_internet in 328 ms [2025-08-22 17:20:29][352288966213238][5810 ms][DEBUG] rawBody.length=1071 [2025-08-22 17:20:29][352288966213238][5811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966213238\",\"model\":\"SM-A155F\",\"profile_ID\":\"68798efb5676d87288c4576f\",\"group\":\"13b57ec7-dd7d-487d-b7b4-d92c67d682fb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 17:20:29][352288966213238][5811 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 17:20:29][352288966213238][5811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352288966213238\",\"model\":\"SM-A155F\",\"profile_ID\":\"68798efb5676d87288c4576f\",\"group\":\"13b57ec7-dd7d-487d-b7b4-d92c67d682fb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"NFC\",\"email\":\"raquel.1@onmail.com\",\"carrier\":\"TMB\",\"os\":\"12\",\"knoxSdkVersion\":\"KNOX-35\",\"deviceId\":\"\"}'\'' -e'"" [2025-08-22 17:20:32][352288966213238][9247 ms][DEBUG] frida res:res:{"code":4030105,"message":"USER_IS_NOT_ACTIVE","data":"User is not active in KME."}\r\n [2025-08-22 17:20:32][352288966213238][9403 ms][DEBUG] proc_open done in 3592 ms; code=255; res.len=83 [2025-08-22 17:20:32][352288966213238][9403 ms][DEBUG] END runCmdUntilRes#1 in 3592 ms [2025-08-22 17:20:32][352288966213238][9403 ms][INFO] SUCCESS response from frida (len=83) [2025-08-22 21:19:59][359670541218613][1 ms][INFO] === Request start === [2025-08-22 21:19:59][359670541218613][2 ms][DEBUG] START check_scloud [2025-08-22 21:19:59][359670541218613][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:20:05][359670541218613][5454 ms][DEBUG] SU: done in 5453 ms; out* daemon not running. starting it now at tcp:5037 *\n* daemon started successfully *\nu0_a118 15996 4970 23791696 61972 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:20:05][359670541218613][5454 ms][DEBUG] targetPkg: running [2025-08-22 21:20:05][359670541218613][5454 ms][DEBUG] END check_scloud in 5453 ms [2025-08-22 21:20:05][359670541218613][5454 ms][DEBUG] START check_boot_completed [2025-08-22 21:20:05][359670541218613][5454 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:20:05][359670541218613][5486 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 21:20:05][359670541218613][5486 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:20:05][359670541218613][5532 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:20:05][359670541218613][5532 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 21:20:05][359670541218613][5532 ms][DEBUG] START check_internet [2025-08-22 21:20:05][359670541218613][5532 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 21:20:05][359670541218613][6079 ms][DEBUG] SU: done in 547 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.156/200.156/200.156/0.000 ms\n [2025-08-22 21:20:05][359670541218613][6080 ms][DEBUG] check_internet: online [2025-08-22 21:20:05][359670541218613][6080 ms][DEBUG] END check_internet in 547 ms [2025-08-22 21:20:05][359670541218613][6080 ms][DEBUG] rawBody.length=1160 [2025-08-22 21:20:05][359670541218613][6080 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359670541218613\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CWA0AL0XL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7850\"}'\'' -e'"" [2025-08-22 21:20:05][359670541218613][6080 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:20:05][359670541218613][6080 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359670541218613\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CWA0AL0XL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7850\"}'\'' -e'"" [2025-08-22 21:20:11][359670541218613][12056 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_76e74ad3-5da1-4fb8-a05a-cd71d52e23d7","id":"QR_76e74ad3-5da1-4fb8-a05a-cd71d52e23d7","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:20:11][359670541218613][12212 ms][DEBUG] proc_open done in 6132 ms; code=255; res.len=3343 [2025-08-22 21:20:11][359670541218613][12212 ms][DEBUG] END runCmdUntilRes#1 in 6133 ms [2025-08-22 21:20:11][359670541218613][12213 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:28:04][354314900268563][1 ms][INFO] === Request start === [2025-08-22 21:28:04][354314900268563][1 ms][DEBUG] START check_scloud [2025-08-22 21:28:04][354314900268563][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:28:04][354314900268563][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 15996 4970 23903476 77352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:28:04][354314900268563][308 ms][DEBUG] targetPkg: running [2025-08-22 21:28:04][354314900268563][308 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 21:28:04][354314900268563][308 ms][DEBUG] START check_boot_completed [2025-08-22 21:28:04][354314900268563][308 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:28:04][354314900268563][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 21:28:04][354314900268563][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:28:04][354314900268563][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:28:04][354314900268563][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 21:28:04][354314900268563][386 ms][DEBUG] START check_internet [2025-08-22 21:28:04][354314900268563][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 21:28:05][354314900268563][855 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=199 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 199.975/199.975/199.975/0.000 ms\n [2025-08-22 21:28:05][354314900268563][855 ms][DEBUG] check_internet: online [2025-08-22 21:28:05][354314900268563][855 ms][DEBUG] END check_internet in 468 ms [2025-08-22 21:28:05][354314900268563][855 ms][DEBUG] rawBody.length=1160 [2025-08-22 21:28:05][354314900268563][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314900268563\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58W40A2PJV\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9523\"}'\'' -e'"" [2025-08-22 21:28:05][354314900268563][855 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:28:05][354314900268563][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354314900268563\",\"model\":\"SM-A245M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58W40A2PJV\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9523\"}'\'' -e'"" [2025-08-22 21:28:11][354314900268563][6619 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_582c8b38-d8ba-4c20-a95f-c3de727ccabf","id":"QR_582c8b38-d8ba-4c20-a95f-c3de727ccabf","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:28:11][354314900268563][6775 ms][DEBUG] proc_open done in 5920 ms; code=255; res.len=3343 [2025-08-22 21:28:11][354314900268563][6775 ms][DEBUG] END runCmdUntilRes#1 in 5921 ms [2025-08-22 21:28:11][354314900268563][6775 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:29:04][356927265190987][0 ms][INFO] === Request start === [2025-08-22 21:29:04][356927265190987][1 ms][DEBUG] START check_scloud [2025-08-22 21:29:04][356927265190987][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:29:05][356927265190987][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 15996 4970 24087588 89616 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:29:05][356927265190987][306 ms][DEBUG] targetPkg: running [2025-08-22 21:29:05][356927265190987][306 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 21:29:05][356927265190987][306 ms][DEBUG] START check_boot_completed [2025-08-22 21:29:05][356927265190987][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:29:05][356927265190987][352 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 21:29:05][356927265190987][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:29:05][356927265190987][416 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 21:29:05][356927265190987][416 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 21:29:05][356927265190987][416 ms][DEBUG] rawBody.length=1160 [2025-08-22 21:29:05][356927265190987][416 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927265190987\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8Y100HHMR\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6042\"}'\'' -e'"" [2025-08-22 21:29:05][356927265190987][416 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:29:05][356927265190987][416 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927265190987\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RX8Y100HHMR\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6042\"}'\'' -e'"" [2025-08-22 21:29:10][356927265190987][6288 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f685cf4c-1446-4147-b10c-c308352be764","id":"QR_f685cf4c-1446-4147-b10c-c308352be764","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:29:11][356927265190987][6444 ms][DEBUG] proc_open done in 6028 ms; code=255; res.len=3343 [2025-08-22 21:29:11][356927265190987][6445 ms][DEBUG] END runCmdUntilRes#1 in 6028 ms [2025-08-22 21:29:11][356927265190987][6445 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:38:03][359156944889986][1 ms][INFO] === Request start === [2025-08-22 21:38:03][359156944889986][2 ms][DEBUG] START check_scloud [2025-08-22 21:38:03][359156944889986][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:38:03][359156944889986][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 15996 4970 24175868 101268 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:38:03][359156944889986][309 ms][DEBUG] targetPkg: running [2025-08-22 21:38:03][359156944889986][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 21:38:03][359156944889986][309 ms][DEBUG] START check_boot_completed [2025-08-22 21:38:03][359156944889986][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:38:03][359156944889986][339 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 21:38:03][359156944889986][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:38:03][359156944889986][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:38:03][359156944889986][386 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 21:38:03][359156944889986][386 ms][DEBUG] START check_internet [2025-08-22 21:38:03][359156944889986][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 21:38:04][359156944889986][855 ms][DEBUG] SU: done in 469 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=193 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 193.950/193.950/193.950/0.000 ms\n [2025-08-22 21:38:04][359156944889986][855 ms][DEBUG] check_internet: online [2025-08-22 21:38:04][359156944889986][855 ms][DEBUG] END check_internet in 469 ms [2025-08-22 21:38:04][359156944889986][855 ms][DEBUG] rawBody.length=1159 [2025-08-22 21:38:04][359156944889986][855 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944889986\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XA05KVTR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3470\"}'\'' -e'"" [2025-08-22 21:38:04][359156944889986][855 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:38:04][359156944889986][855 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156944889986\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"RF8XA05KVTR\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3470\"}'\'' -e'"" [2025-08-22 21:38:08][359156944889986][5182 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fbe3a32c-e6b5-472f-ada8-3372ea511899","id":"QR_fbe3a32c-e6b5-472f-ada8-3372ea511899","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:38:08][359156944889986][5338 ms][DEBUG] proc_open done in 4483 ms; code=255; res.len=3343 [2025-08-22 21:38:08][359156944889986][5338 ms][DEBUG] END runCmdUntilRes#1 in 4483 ms [2025-08-22 21:38:08][359156944889986][5338 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:39:04][355149492040668][0 ms][INFO] === Request start === [2025-08-22 21:39:04][355149492040668][1 ms][DEBUG] START check_scloud [2025-08-22 21:39:04][355149492040668][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:39:04][355149492040668][315 ms][DEBUG] SU: done in 314 ms; outu0_a118 15996 4970 24296812 111860 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:39:04][355149492040668][315 ms][DEBUG] targetPkg: running [2025-08-22 21:39:04][355149492040668][315 ms][DEBUG] END check_scloud in 314 ms [2025-08-22 21:39:04][355149492040668][315 ms][DEBUG] START check_boot_completed [2025-08-22 21:39:04][355149492040668][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:39:05][355149492040668][346 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 21:39:05][355149492040668][346 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:39:05][355149492040668][393 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:39:05][355149492040668][393 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 21:39:05][355149492040668][393 ms][DEBUG] rawBody.length=1160 [2025-08-22 21:39:05][355149492040668][393 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355149492040668\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW13VYK0N\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1525\"}'\'' -e'"" [2025-08-22 21:39:05][355149492040668][393 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:39:05][355149492040668][393 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355149492040668\",\"model\":\"SM-S918U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R5CW13VYK0N\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"VZW\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC1525\"}'\'' -e'"" [2025-08-22 21:39:10][355149492040668][5892 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c09bcc59-17ee-41e3-abd5-917769e669f0","id":"QR_c09bcc59-17ee-41e3-abd5-917769e669f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:39:10][355149492040668][6048 ms][DEBUG] proc_open done in 5655 ms; code=255; res.len=3343 [2025-08-22 21:39:10][355149492040668][6048 ms][DEBUG] END runCmdUntilRes#1 in 5655 ms [2025-08-22 21:39:10][355149492040668][6048 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:43:04][350456241126887][1 ms][INFO] === Request start === [2025-08-22 21:43:04][350456241126887][2 ms][DEBUG] START check_scloud [2025-08-22 21:43:04][350456241126887][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:43:05][350456241126887][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 15996 4970 24429072 123720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:43:05][350456241126887][301 ms][DEBUG] targetPkg: running [2025-08-22 21:43:05][350456241126887][301 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 21:43:05][350456241126887][301 ms][DEBUG] START check_boot_completed [2025-08-22 21:43:05][350456241126887][301 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:43:05][350456241126887][363 ms][DEBUG] ADB: done in 62 ms; out [2025-08-22 21:43:05][350456241126887][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:43:05][350456241126887][410 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:43:05][350456241126887][410 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 21:43:05][350456241126887][410 ms][DEBUG] rawBody.length=1149 [2025-08-22 21:43:05][350456241126887][410 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456241126887\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3949\"}'\'' -e'"" [2025-08-22 21:43:05][350456241126887][410 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:43:05][350456241126887][410 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350456241126887\",\"model\":\"SM-G781B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3949\"}'\'' -e'"" [2025-08-22 21:43:10][350456241126887][5768 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_05feb508-bcd2-4120-bf41-de1e1aa85503","id":"QR_05feb508-bcd2-4120-bf41-de1e1aa85503","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:43:10][350456241126887][5924 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-22 21:43:10][350456241126887][5924 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-22 21:43:10][350456241126887][5925 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:43:16][357994256859458][0 ms][INFO] === Request start === [2025-08-22 21:43:16][357994256859458][1 ms][DEBUG] START check_scloud [2025-08-22 21:43:16][357994256859458][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:43:17][357994256859458][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 15996 4970 24557336 135104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:43:17][357994256859458][297 ms][DEBUG] targetPkg: running [2025-08-22 21:43:17][357994256859458][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-22 21:43:17][357994256859458][297 ms][DEBUG] START check_boot_completed [2025-08-22 21:43:17][357994256859458][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:43:17][357994256859458][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 21:43:17][357994256859458][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:43:17][357994256859458][406 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 21:43:17][357994256859458][407 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 21:43:17][357994256859458][407 ms][DEBUG] rawBody.length=1149 [2025-08-22 21:43:17][357994256859458][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357994256859458\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3940\"}'\'' -e'"" [2025-08-22 21:43:17][357994256859458][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:43:17][357994256859458][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357994256859458\",\"model\":\"SM-S928U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ATT\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3940\"}'\'' -e'"" [2025-08-22 21:43:23][357994256859458][6249 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f1b91b1-c5d0-49f7-b133-23ee49ed0d28","id":"QR_3f1b91b1-c5d0-49f7-b133-23ee49ed0d28","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:43:23][357994256859458][6405 ms][DEBUG] proc_open done in 5998 ms; code=255; res.len=3343 [2025-08-22 21:43:23][357994256859458][6405 ms][DEBUG] END runCmdUntilRes#1 in 5998 ms [2025-08-22 21:43:23][357994256859458][6405 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:44:04][356168500132126][0 ms][INFO] === Request start === [2025-08-22 21:44:04][356168500132126][1 ms][DEBUG] START check_scloud [2025-08-22 21:44:04][356168500132126][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:44:05][356168500132126][319 ms][DEBUG] SU: done in 318 ms; outu0_a118 15996 4970 24679192 146840 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:44:05][356168500132126][319 ms][DEBUG] targetPkg: running [2025-08-22 21:44:05][356168500132126][319 ms][DEBUG] END check_scloud in 318 ms [2025-08-22 21:44:05][356168500132126][319 ms][DEBUG] START check_boot_completed [2025-08-22 21:44:05][356168500132126][319 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:44:05][356168500132126][397 ms][DEBUG] ADB: done in 78 ms; out [2025-08-22 21:44:05][356168500132126][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:44:05][356168500132126][444 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:44:05][356168500132126][444 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 21:44:05][356168500132126][444 ms][DEBUG] START check_internet [2025-08-22 21:44:05][356168500132126][444 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 21:44:05][356168500132126][944 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.192/202.192/202.192/0.000 ms\n [2025-08-22 21:44:05][356168500132126][944 ms][DEBUG] check_internet: online [2025-08-22 21:44:05][356168500132126][944 ms][DEBUG] END check_internet in 500 ms [2025-08-22 21:44:05][356168500132126][944 ms][DEBUG] rawBody.length=1149 [2025-08-22 21:44:05][356168500132126][944 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356168500132126\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8012\"}'\'' -e'"" [2025-08-22 21:44:05][356168500132126][944 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:44:05][356168500132126][944 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356168500132126\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"L15\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8012\"}'\'' -e'"" [2025-08-22 21:44:10][356168500132126][5583 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9b73acee-d11c-46eb-8c19-7cd23398e8fd","id":"QR_9b73acee-d11c-46eb-8c19-7cd23398e8fd","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:44:10][356168500132126][5740 ms][DEBUG] proc_open done in 4795 ms; code=255; res.len=3343 [2025-08-22 21:44:10][356168500132126][5740 ms][DEBUG] END runCmdUntilRes#1 in 4796 ms [2025-08-22 21:44:10][356168500132126][5740 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:45:03][351886694293645][0 ms][INFO] === Request start === [2025-08-22 21:45:03][351886694293645][1 ms][DEBUG] START check_scloud [2025-08-22 21:45:03][351886694293645][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:45:03][351886694293645][318 ms][DEBUG] SU: done in 317 ms; outu0_a118 15996 4970 24813568 157792 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:45:03][351886694293645][318 ms][DEBUG] targetPkg: running [2025-08-22 21:45:03][351886694293645][318 ms][DEBUG] END check_scloud in 317 ms [2025-08-22 21:45:03][351886694293645][318 ms][DEBUG] START check_boot_completed [2025-08-22 21:45:03][351886694293645][318 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:45:03][351886694293645][365 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 21:45:03][351886694293645][365 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:45:03][351886694293645][412 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:45:03][351886694293645][412 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 21:45:03][351886694293645][412 ms][DEBUG] rawBody.length=1148 [2025-08-22 21:45:03][351886694293645][412 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886694293645\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6439\"}'\'' -e'"" [2025-08-22 21:45:03][351886694293645][412 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:45:03][351886694293645][412 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886694293645\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6439\"}'\'' -e'"" [2025-08-22 21:45:08][351886694293645][4677 ms][DEBUG] proc_open done in 4265 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 21:45:08][351886694293645][4677 ms][DEBUG] END runCmdUntilRes#1 in 4265 ms [2025-08-22 21:45:08][351886694293645][4677 ms][WARN] Detected error: Process with pid 15996 either refused to load frida-agent, or terminated during injection [2025-08-22 21:45:08][351886694293645][4677 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 21:45:08][351886694293645][4833 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 21:45:08][351886694293645][4833 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 21:45:08][351886694293645][4833 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 21:45:08][351886694293645][4958 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 21:45:08][351886694293645][4958 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 21:45:08][351886694293645][5254 ms][DEBUG] SU: done in 297 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 21:45:10][351886694293645][7269 ms][DEBUG] START check_boot_completed [2025-08-22 21:45:10][351886694293645][7270 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:45:10][351886694293645][7301 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 21:45:10][351886694293645][7301 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:45:10][351886694293645][7348 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:45:10][351886694293645][7348 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 21:45:13][351886694293645][10362 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 21:45:13][351886694293645][10363 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351886694293645\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6439\"}'\'' -e'"" [2025-08-22 21:45:17][351886694293645][14283 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4c93c626-e082-4dd5-8863-fe4622903d7e","id":"QR_4c93c626-e082-4dd5-8863-fe4622903d7e","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:45:18][351886694293645][14440 ms][DEBUG] proc_open done in 4077 ms; code=255; res.len=3343 [2025-08-22 21:45:18][351886694293645][14440 ms][DEBUG] END runCmdUntilRes#2 in 4077 ms [2025-08-22 21:45:18][351886694293645][14440 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:47:04][359156940449843][1 ms][INFO] === Request start === [2025-08-22 21:47:04][359156940449843][2 ms][DEBUG] START check_scloud [2025-08-22 21:47:04][359156940449843][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:47:04][359156940449843][305 ms][DEBUG] SU: done in 304 ms; outu0_a118 27793 4970 23471600 126868 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:47:04][359156940449843][305 ms][DEBUG] targetPkg: running [2025-08-22 21:47:04][359156940449843][305 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 21:47:04][359156940449843][306 ms][DEBUG] START check_boot_completed [2025-08-22 21:47:04][359156940449843][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:47:04][359156940449843][352 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 21:47:04][359156940449843][352 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:47:04][359156940449843][399 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:47:04][359156940449843][399 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 21:47:04][359156940449843][399 ms][DEBUG] rawBody.length=1149 [2025-08-22 21:47:04][359156940449843][399 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156940449843\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3851\"}'\'' -e'"" [2025-08-22 21:47:04][359156940449843][400 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:47:04][359156940449843][400 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156940449843\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC3851\"}'\'' -e'"" [2025-08-22 21:47:09][359156940449843][5757 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fa694030-5e23-42df-8555-4d9968e6e0f4","id":"QR_fa694030-5e23-42df-8555-4d9968e6e0f4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:47:09][359156940449843][5913 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-22 21:47:09][359156940449843][5913 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-22 21:47:09][359156940449843][5913 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:53:04][352810100304548][1 ms][INFO] === Request start === [2025-08-22 21:53:04][352810100304548][2 ms][DEBUG] START check_scloud [2025-08-22 21:53:04][352810100304548][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:53:04][352810100304548][303 ms][DEBUG] SU: done in 301 ms; outu0_a118 27793 4970 23580040 138124 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:53:04][352810100304548][303 ms][DEBUG] targetPkg: running [2025-08-22 21:53:04][352810100304548][303 ms][DEBUG] END check_scloud in 302 ms [2025-08-22 21:53:04][352810100304548][303 ms][DEBUG] START check_boot_completed [2025-08-22 21:53:04][352810100304548][303 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:53:04][352810100304548][350 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 21:53:04][352810100304548][350 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:53:04][352810100304548][412 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 21:53:04][352810100304548][413 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 21:53:04][352810100304548][413 ms][DEBUG] rawBody.length=1149 [2025-08-22 21:53:04][352810100304548][413 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352810100304548\",\"model\":\"SM-G970U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8072\"}'\'' -e'"" [2025-08-22 21:53:04][352810100304548][413 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:53:04][352810100304548][413 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352810100304548\",\"model\":\"SM-G970U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC8072\"}'\'' -e'"" [2025-08-22 21:53:10][352810100304548][5802 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_74c6cf1e-5024-4cdd-9d3a-8ed1d8494ef3","id":"QR_74c6cf1e-5024-4cdd-9d3a-8ed1d8494ef3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:53:10][352810100304548][5958 ms][DEBUG] proc_open done in 5545 ms; code=255; res.len=3343 [2025-08-22 21:53:10][352810100304548][5958 ms][DEBUG] END runCmdUntilRes#1 in 5545 ms [2025-08-22 21:53:10][352810100304548][5958 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:53:16][359156947417546][0 ms][INFO] === Request start === [2025-08-22 21:53:16][359156947417546][1 ms][DEBUG] START check_scloud [2025-08-22 21:53:16][359156947417546][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:53:16][359156947417546][261 ms][DEBUG] SU: done in 260 ms; outu0_a118 27793 4970 23744136 149096 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:53:16][359156947417546][261 ms][DEBUG] targetPkg: running [2025-08-22 21:53:16][359156947417546][261 ms][DEBUG] END check_scloud in 260 ms [2025-08-22 21:53:16][359156947417546][261 ms][DEBUG] START check_boot_completed [2025-08-22 21:53:16][359156947417546][261 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:53:16][359156947417546][308 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 21:53:16][359156947417546][308 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:53:16][359156947417546][355 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:53:16][359156947417546][355 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 21:53:16][359156947417546][355 ms][DEBUG] rawBody.length=1149 [2025-08-22 21:53:16][359156947417546][355 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7825\"}'\'' -e'"" [2025-08-22 21:53:16][359156947417546][355 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:53:16][359156947417546][355 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156947417546\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC7825\"}'\'' -e'"" [2025-08-22 21:53:21][359156947417546][5322 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_bad40769-302e-4631-9d40-db82d4b2a6b8","id":"QR_bad40769-302e-4631-9d40-db82d4b2a6b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:53:21][359156947417546][5478 ms][DEBUG] proc_open done in 5123 ms; code=255; res.len=3343 [2025-08-22 21:53:21][359156947417546][5478 ms][DEBUG] END runCmdUntilRes#1 in 5123 ms [2025-08-22 21:53:21][359156947417546][5478 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 21:56:04][354099887278244][1 ms][INFO] === Request start === [2025-08-22 21:56:04][354099887278244][2 ms][DEBUG] START check_scloud [2025-08-22 21:56:04][354099887278244][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 21:56:05][354099887278244][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 27793 4970 23849736 161396 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 21:56:05][354099887278244][292 ms][DEBUG] targetPkg: running [2025-08-22 21:56:05][354099887278244][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-22 21:56:05][354099887278244][293 ms][DEBUG] START check_boot_completed [2025-08-22 21:56:05][354099887278244][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 21:56:05][354099887278244][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 21:56:05][354099887278244][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 21:56:05][354099887278244][386 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 21:56:05][354099887278244][386 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 21:56:05][354099887278244][386 ms][DEBUG] START check_internet [2025-08-22 21:56:05][354099887278244][386 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 21:56:05][354099887278244][839 ms][DEBUG] SU: done in 453 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.933/201.933/201.933/0.000 ms\n [2025-08-22 21:56:05][354099887278244][839 ms][DEBUG] check_internet: online [2025-08-22 21:56:05][354099887278244][839 ms][DEBUG] END check_internet in 453 ms [2025-08-22 21:56:05][354099887278244][839 ms][DEBUG] rawBody.length=1149 [2025-08-22 21:56:05][354099887278244][839 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099887278244\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7526\"}'\'' -e'"" [2025-08-22 21:56:05][354099887278244][839 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 21:56:05][354099887278244][839 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354099887278244\",\"model\":\"SM-A336M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7526\"}'\'' -e'"" [2025-08-22 21:56:12][354099887278244][7431 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9935a4cd-04f0-4c49-b3eb-e80948475753","id":"QR_9935a4cd-04f0-4c49-b3eb-e80948475753","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 21:56:12][354099887278244][7587 ms][DEBUG] proc_open done in 6748 ms; code=255; res.len=3343 [2025-08-22 21:56:12][354099887278244][7587 ms][DEBUG] END runCmdUntilRes#1 in 6748 ms [2025-08-22 21:56:12][354099887278244][7588 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:04:04][350744860429553][1 ms][INFO] === Request start === [2025-08-22 22:04:04][350744860429553][2 ms][DEBUG] START check_scloud [2025-08-22 22:04:04][350744860429553][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:04:04][350744860429553][313 ms][DEBUG] SU: done in 312 ms; outu0_a118 27793 4970 23946144 172588 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:04:04][350744860429553][313 ms][DEBUG] targetPkg: running [2025-08-22 22:04:04][350744860429553][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 22:04:04][350744860429553][313 ms][DEBUG] START check_boot_completed [2025-08-22 22:04:04][350744860429553][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:04:04][350744860429553][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:04:04][350744860429553][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:04:04][350744860429553][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:04:04][350744860429553][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 22:04:04][350744860429553][407 ms][DEBUG] START check_internet [2025-08-22 22:04:04][350744860429553][407 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:04:05][350744860429553][938 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.111/201.111/201.111/0.000 ms\n [2025-08-22 22:04:05][350744860429553][938 ms][DEBUG] check_internet: online [2025-08-22 22:04:05][350744860429553][938 ms][DEBUG] END check_internet in 531 ms [2025-08-22 22:04:05][350744860429553][938 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:04:05][350744860429553][938 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350744860429553\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6604\"}'\'' -e'"" [2025-08-22 22:04:05][350744860429553][938 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:04:05][350744860429553][938 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350744860429553\",\"model\":\"SM-S901U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6604\"}'\'' -e'"" [2025-08-22 22:04:10][350744860429553][5999 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_d7962111-d0b1-4117-a6ba-1a8d627431ac","id":"QR_d7962111-d0b1-4117-a6ba-1a8d627431ac","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:04:10][350744860429553][6155 ms][DEBUG] proc_open done in 5217 ms; code=255; res.len=3343 [2025-08-22 22:04:10][350744860429553][6155 ms][DEBUG] END runCmdUntilRes#1 in 5217 ms [2025-08-22 22:04:10][350744860429553][6155 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:04:15][354484221767104][0 ms][INFO] === Request start === [2025-08-22 22:04:15][354484221767104][1 ms][DEBUG] START check_scloud [2025-08-22 22:04:15][354484221767104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:04:16][354484221767104][297 ms][DEBUG] SU: done in 296 ms; outu0_a118 27793 4970 24095988 183520 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:04:16][354484221767104][297 ms][DEBUG] targetPkg: running [2025-08-22 22:04:16][354484221767104][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-22 22:04:16][354484221767104][297 ms][DEBUG] START check_boot_completed [2025-08-22 22:04:16][354484221767104][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:04:16][354484221767104][344 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:04:16][354484221767104][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:04:16][354484221767104][422 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 22:04:16][354484221767104][422 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 22:04:16][354484221767104][422 ms][DEBUG] START check_internet [2025-08-22 22:04:16][354484221767104][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:04:16][354484221767104][750 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=206 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 206.388/206.388/206.388/0.000 ms\n [2025-08-22 22:04:16][354484221767104][750 ms][DEBUG] check_internet: online [2025-08-22 22:04:16][354484221767104][750 ms][DEBUG] END check_internet in 328 ms [2025-08-22 22:04:16][354484221767104][750 ms][DEBUG] rawBody.length=1148 [2025-08-22 22:04:16][354484221767104][750 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484221767104\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7131\"}'\'' -e'"" [2025-08-22 22:04:16][354484221767104][750 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:04:16][354484221767104][750 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484221767104\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7131\"}'\'' -e'"" [2025-08-22 22:04:20][354484221767104][4499 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"Device tenant and profile tenant mismatch."}\r\n [2025-08-22 22:04:20][354484221767104][4655 ms][DEBUG] proc_open done in 3905 ms; code=255; res.len=115 [2025-08-22 22:04:20][354484221767104][4655 ms][DEBUG] END runCmdUntilRes#1 in 3905 ms [2025-08-22 22:04:20][354484221767104][4655 ms][INFO] SUCCESS response from frida (len=115) [2025-08-22 22:04:20][][0 ms][INFO] === Request start === [2025-08-22 22:04:20][][1 ms][DEBUG] START check_scloud [2025-08-22 22:04:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:04:21][][314 ms][DEBUG] SU: done in 313 ms; outu0_a118 27793 4970 24244732 195048 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:04:21][][314 ms][DEBUG] targetPkg: running [2025-08-22 22:04:21][][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 22:04:21][][314 ms][DEBUG] START check_boot_completed [2025-08-22 22:04:21][][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:04:21][][361 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:04:21][][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:04:21][][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:04:21][][408 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 22:04:21][][408 ms][DEBUG] START check_internet [2025-08-22 22:04:21][][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:04:21][][705 ms][DEBUG] SU: done in 296 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=142 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 142.410/142.410/142.410/0.000 ms\n [2025-08-22 22:04:21][][705 ms][DEBUG] check_internet: online [2025-08-22 22:04:21][][705 ms][DEBUG] END check_internet in 297 ms [2025-08-22 22:04:21][][705 ms][DEBUG] rawBody.length=1129 [2025-08-22 22:04:21][][705 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW10WXMEW\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3560\"}'\'' -e'"" [2025-08-22 22:04:21][][705 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:04:21][][705 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"R5CW10WXMEW\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC3560\"}'\'' -e'"" [2025-08-22 22:04:24][][4126 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 22:04:25][][4282 ms][DEBUG] proc_open done in 3577 ms; code=255; res.len=107 [2025-08-22 22:04:25][][4282 ms][DEBUG] END runCmdUntilRes#1 in 3577 ms [2025-08-22 22:04:25][][4282 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 22:04:26][354484221767104][0 ms][INFO] === Request start === [2025-08-22 22:04:26][354484221767104][1 ms][DEBUG] START check_scloud [2025-08-22 22:04:26][354484221767104][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:04:27][354484221767104][297 ms][DEBUG] SU: done in 295 ms; outu0_a118 27793 4970 24360672 205856 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:04:27][354484221767104][297 ms][DEBUG] targetPkg: running [2025-08-22 22:04:27][354484221767104][297 ms][DEBUG] END check_scloud in 296 ms [2025-08-22 22:04:27][354484221767104][297 ms][DEBUG] START check_boot_completed [2025-08-22 22:04:27][354484221767104][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:04:27][354484221767104][343 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:04:27][354484221767104][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:04:27][354484221767104][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 22:04:27][354484221767104][405 ms][DEBUG] END check_boot_completed in 108 ms [2025-08-22 22:04:27][354484221767104][405 ms][DEBUG] START check_internet [2025-08-22 22:04:27][354484221767104][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:04:27][354484221767104][639 ms][DEBUG] SU: done in 234 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=138 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 138.418/138.418/138.418/0.000 ms\n [2025-08-22 22:04:27][354484221767104][640 ms][DEBUG] check_internet: online [2025-08-22 22:04:27][354484221767104][640 ms][DEBUG] END check_internet in 235 ms [2025-08-22 22:04:27][354484221767104][640 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:04:27][354484221767104][640 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484221767104\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2555\"}'\'' -e'"" [2025-08-22 22:04:27][354484221767104][640 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:04:27][354484221767104][640 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354484221767104\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2555\"}'\'' -e'"" [2025-08-22 22:04:33][354484221767104][6497 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ccc7431b-64bd-4e90-985e-e5c7e4ff94b2","id":"QR_ccc7431b-64bd-4e90-985e-e5c7e4ff94b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:04:33][354484221767104][6653 ms][DEBUG] proc_open done in 6013 ms; code=255; res.len=3343 [2025-08-22 22:04:33][354484221767104][6653 ms][DEBUG] END runCmdUntilRes#1 in 6013 ms [2025-08-22 22:04:33][354484221767104][6653 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:07:05][350011602088141][1 ms][INFO] === Request start === [2025-08-22 22:07:05][350011602088141][2 ms][DEBUG] START check_scloud [2025-08-22 22:07:05][350011602088141][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:07:05][350011602088141][258 ms][DEBUG] SU: done in 256 ms; outu0_a118 27793 4970 24480636 218104 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:07:05][350011602088141][258 ms][DEBUG] targetPkg: running [2025-08-22 22:07:05][350011602088141][258 ms][DEBUG] END check_scloud in 256 ms [2025-08-22 22:07:05][350011602088141][258 ms][DEBUG] START check_boot_completed [2025-08-22 22:07:05][350011602088141][258 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:07:05][350011602088141][289 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 22:07:05][350011602088141][289 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:07:05][350011602088141][336 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:07:05][350011602088141][336 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 22:07:05][350011602088141][336 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:07:05][350011602088141][336 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011602088141\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2387\"}'\'' -e'"" [2025-08-22 22:07:05][350011602088141][336 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:07:05][350011602088141][336 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350011602088141\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2387\"}'\'' -e'"" [2025-08-22 22:07:11][350011602088141][5959 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7c87bf51-d931-4f60-9681-29df816942b2","id":"QR_7c87bf51-d931-4f60-9681-29df816942b2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:07:11][350011602088141][6115 ms][DEBUG] proc_open done in 5779 ms; code=255; res.len=3343 [2025-08-22 22:07:11][350011602088141][6116 ms][DEBUG] END runCmdUntilRes#1 in 5780 ms [2025-08-22 22:07:11][350011602088141][6116 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:11:06][354401160883973][1 ms][INFO] === Request start === [2025-08-22 22:11:06][354401160883973][2 ms][DEBUG] START check_scloud [2025-08-22 22:11:06][354401160883973][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:11:06][354401160883973][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 27793 4970 24620156 201072 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:11:06][354401160883973][306 ms][DEBUG] targetPkg: running [2025-08-22 22:11:06][354401160883973][307 ms][DEBUG] END check_scloud in 305 ms [2025-08-22 22:11:06][354401160883973][307 ms][DEBUG] START check_boot_completed [2025-08-22 22:11:06][354401160883973][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:11:06][354401160883973][336 ms][DEBUG] ADB: done in 30 ms; out [2025-08-22 22:11:06][354401160883973][336 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:11:06][354401160883973][383 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:11:06][354401160883973][383 ms][DEBUG] END check_boot_completed in 77 ms [2025-08-22 22:11:06][354401160883973][383 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:11:06][354401160883973][383 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160883973\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1818\"}'\'' -e'"" [2025-08-22 22:11:06][354401160883973][383 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:11:06][354401160883973][383 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160883973\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1818\"}'\'' -e'"" [2025-08-22 22:11:10][354401160883973][4820 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 22:11:10][354401160883973][4976 ms][DEBUG] proc_open done in 4593 ms; code=255; res.len=107 [2025-08-22 22:11:10][354401160883973][4976 ms][DEBUG] END runCmdUntilRes#1 in 4593 ms [2025-08-22 22:11:10][354401160883973][4976 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 22:11:11][][0 ms][INFO] === Request start === [2025-08-22 22:11:11][][1 ms][DEBUG] START check_scloud [2025-08-22 22:11:11][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:11:11][][282 ms][DEBUG] SU: done in 281 ms; outu0_a118 27793 4970 24751616 199248 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:11:11][][283 ms][DEBUG] targetPkg: running [2025-08-22 22:11:11][][283 ms][DEBUG] END check_scloud in 282 ms [2025-08-22 22:11:11][][283 ms][DEBUG] START check_boot_completed [2025-08-22 22:11:11][][283 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:11:11][][329 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:11:11][][329 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:11:11][][376 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:11:11][][376 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 22:11:11][][376 ms][DEBUG] rawBody.length=1130 [2025-08-22 22:11:11][][376 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X90L7MRE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6391\"}'\'' -e'"" [2025-08-22 22:11:11][][377 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:11:11][][377 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X90L7MRE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6391\"}'\'' -e'"" [2025-08-22 22:11:15][][4297 ms][DEBUG] proc_open done in 3920 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 22:11:15][][4297 ms][DEBUG] END runCmdUntilRes#1 in 3921 ms [2025-08-22 22:11:15][][4297 ms][WARN] Detected error: Process with pid 27793 either refused to load frida-agent, or terminated during injection [2025-08-22 22:11:15][][4297 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 22:11:15][][4438 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 22:11:15][][4438 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 22:11:15][][4438 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 22:11:15][][4562 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 22:11:15][][4562 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 22:11:16][][4750 ms][DEBUG] SU: done in 188 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 22:11:18][][6765 ms][DEBUG] START check_boot_completed [2025-08-22 22:11:18][][6765 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:11:18][][6812 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:11:18][][6812 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:11:18][][6875 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 22:11:18][][6875 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 22:11:21][][9889 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 22:11:21][][9889 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"R58X90L7MRE\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC6391\"}'\'' -e'"" [2025-08-22 22:11:25][][13685 ms][DEBUG] frida res:res:{"code":4006001,"message":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH","data":"NFC_ENROLL_DEVICE_PROFILE_MISMATCH"}\r\n [2025-08-22 22:11:25][][13842 ms][DEBUG] proc_open done in 3952 ms; code=255; res.len=107 [2025-08-22 22:11:25][][13842 ms][DEBUG] END runCmdUntilRes#2 in 3952 ms [2025-08-22 22:11:25][][13842 ms][INFO] SUCCESS response from frida (len=107) [2025-08-22 22:11:25][354401160883973][0 ms][INFO] === Request start === [2025-08-22 22:11:25][354401160883973][0 ms][DEBUG] START check_scloud [2025-08-22 22:11:25][354401160883973][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:11:26][354401160883973][252 ms][DEBUG] SU: done in 251 ms; outu0_a118 30345 4970 23574236 123620 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:11:26][354401160883973][252 ms][DEBUG] targetPkg: running [2025-08-22 22:11:26][354401160883973][252 ms][DEBUG] END check_scloud in 252 ms [2025-08-22 22:11:26][354401160883973][252 ms][DEBUG] START check_boot_completed [2025-08-22 22:11:26][354401160883973][252 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:11:26][354401160883973][298 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:11:26][354401160883973][298 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:11:26][354401160883973][345 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:11:26][354401160883973][345 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 22:11:26][354401160883973][345 ms][DEBUG] rawBody.length=1148 [2025-08-22 22:11:26][354401160883973][345 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160883973\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2733\"}'\'' -e'"" [2025-08-22 22:11:26][354401160883973][345 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:11:26][354401160883973][345 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354401160883973\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2733\"}'\'' -e'"" [2025-08-22 22:11:30][354401160883973][4282 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_010107b2-3fc0-488d-b34e-1ede7fd47833","id":"QR_010107b2-3fc0-488d-b34e-1ede7fd47833","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:11:30][354401160883973][4438 ms][DEBUG] proc_open done in 4093 ms; code=255; res.len=3343 [2025-08-22 22:11:30][354401160883973][4438 ms][DEBUG] END runCmdUntilRes#1 in 4093 ms [2025-08-22 22:11:30][354401160883973][4438 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:12:03][354255811793167][1 ms][INFO] === Request start === [2025-08-22 22:12:03][354255811793167][2 ms][DEBUG] START check_scloud [2025-08-22 22:12:03][354255811793167][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:12:03][354255811793167][314 ms][DEBUG] SU: done in 312 ms; outu0_a118 30345 4970 23629496 138044 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:12:03][354255811793167][314 ms][DEBUG] targetPkg: running [2025-08-22 22:12:03][354255811793167][314 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 22:12:03][354255811793167][314 ms][DEBUG] START check_boot_completed [2025-08-22 22:12:03][354255811793167][314 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:12:03][354255811793167][361 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:12:03][354255811793167][361 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:12:03][354255811793167][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:12:03][354255811793167][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 22:12:03][354255811793167][408 ms][DEBUG] START check_internet [2025-08-22 22:12:03][354255811793167][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:12:03][354255811793167][845 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.395/200.395/200.395/0.000 ms\n [2025-08-22 22:12:03][354255811793167][845 ms][DEBUG] check_internet: online [2025-08-22 22:12:03][354255811793167][845 ms][DEBUG] END check_internet in 437 ms [2025-08-22 22:12:03][354255811793167][845 ms][DEBUG] rawBody.length=1148 [2025-08-22 22:12:03][354255811793167][845 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811793167\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7098\"}'\'' -e'"" [2025-08-22 22:12:03][354255811793167][845 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:12:03][354255811793167][845 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354255811793167\",\"model\":\"SM-N986B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XFA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7098\"}'\'' -e'"" [2025-08-22 22:12:07][354255811793167][4626 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0a22b954-b521-4623-a544-c5b4b46212ae","id":"QR_0a22b954-b521-4623-a544-c5b4b46212ae","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:12:07][354255811793167][4782 ms][DEBUG] proc_open done in 3936 ms; code=255; res.len=3343 [2025-08-22 22:12:07][354255811793167][4782 ms][DEBUG] END runCmdUntilRes#1 in 3937 ms [2025-08-22 22:12:07][354255811793167][4782 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:13:04][350039930630896][0 ms][INFO] === Request start === [2025-08-22 22:13:04][350039930630896][1 ms][DEBUG] START check_scloud [2025-08-22 22:13:04][350039930630896][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:13:05][350039930630896][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 30345 4970 23745500 149408 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:13:05][350039930630896][286 ms][DEBUG] targetPkg: running [2025-08-22 22:13:05][350039930630896][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-22 22:13:05][350039930630896][286 ms][DEBUG] START check_boot_completed [2025-08-22 22:13:05][350039930630896][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:13:05][350039930630896][317 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 22:13:05][350039930630896][317 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:13:05][350039930630896][380 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 22:13:05][350039930630896][380 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 22:13:05][350039930630896][380 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:13:05][350039930630896][380 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039930630896\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8765\"}'\'' -e'"" [2025-08-22 22:13:05][350039930630896][380 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:13:05][350039930630896][380 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350039930630896\",\"model\":\"SM-A127M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC8765\"}'\'' -e'"" [2025-08-22 22:13:10][350039930630896][5816 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_949f3883-56a7-41d7-9b79-a0cc8eaaebc3","id":"QR_949f3883-56a7-41d7-9b79-a0cc8eaaebc3","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:13:10][350039930630896][5972 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-08-22 22:13:10][350039930630896][5972 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-08-22 22:13:10][350039930630896][5972 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:17:03][352623859150305][1 ms][INFO] === Request start === [2025-08-22 22:17:03][352623859150305][2 ms][DEBUG] START check_scloud [2025-08-22 22:17:03][352623859150305][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:17:03][352623859150305][288 ms][DEBUG] SU: done in 286 ms; outu0_a118 30345 4970 23900240 161108 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:17:03][352623859150305][288 ms][DEBUG] targetPkg: running [2025-08-22 22:17:03][352623859150305][288 ms][DEBUG] END check_scloud in 286 ms [2025-08-22 22:17:03][352623859150305][288 ms][DEBUG] START check_boot_completed [2025-08-22 22:17:03][352623859150305][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:17:03][352623859150305][334 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:17:03][352623859150305][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:17:03][352623859150305][397 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 22:17:03][352623859150305][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 22:17:03][352623859150305][397 ms][DEBUG] rawBody.length=1148 [2025-08-22 22:17:03][352623859150305][397 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623859150305\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9349\"}'\'' -e'"" [2025-08-22 22:17:03][352623859150305][397 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:17:03][352623859150305][397 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352623859150305\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9349\"}'\'' -e'"" [2025-08-22 22:17:07][352623859150305][4412 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_9a9e9480-df2e-4d09-8e24-72eebf8aed48","id":"QR_9a9e9480-df2e-4d09-8e24-72eebf8aed48","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:17:07][352623859150305][4568 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-22 22:17:07][352623859150305][4568 ms][DEBUG] END runCmdUntilRes#1 in 4171 ms [2025-08-22 22:17:07][352623859150305][4568 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:17:11][354564110862726][0 ms][INFO] === Request start === [2025-08-22 22:17:11][354564110862726][1 ms][DEBUG] START check_scloud [2025-08-22 22:17:11][354564110862726][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:17:11][354564110862726][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 30345 4970 24061144 171720 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:17:11][354564110862726][307 ms][DEBUG] targetPkg: running [2025-08-22 22:17:11][354564110862726][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 22:17:11][354564110862726][307 ms][DEBUG] START check_boot_completed [2025-08-22 22:17:11][354564110862726][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:17:11][354564110862726][338 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 22:17:11][354564110862726][338 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:17:11][354564110862726][385 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:17:11][354564110862726][385 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 22:17:11][354564110862726][385 ms][DEBUG] rawBody.length=1150 [2025-08-22 22:17:11][354564110862726][385 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354564110862726\",\"model\":\"SM-S515DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5500\"}'\'' -e'"" [2025-08-22 22:17:11][354564110862726][385 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:17:11][354564110862726][385 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354564110862726\",\"model\":\"SM-S515DL\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TFN\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC5500\"}'\'' -e'"" [2025-08-22 22:17:17][354564110862726][5696 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f4074d34-593b-4423-b422-0cfc5b4f658a","id":"QR_f4074d34-593b-4423-b422-0cfc5b4f658a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:17:17][354564110862726][5852 ms][DEBUG] proc_open done in 5467 ms; code=255; res.len=3343 [2025-08-22 22:17:17][354564110862726][5852 ms][DEBUG] END runCmdUntilRes#1 in 5467 ms [2025-08-22 22:17:17][354564110862726][5852 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:20:05][350656771529778][1 ms][INFO] === Request start === [2025-08-22 22:20:05][350656771529778][2 ms][DEBUG] START check_scloud [2025-08-22 22:20:05][350656771529778][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:20:05][350656771529778][295 ms][DEBUG] SU: done in 293 ms; outu0_a118 30345 4970 24191384 184188 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:20:05][350656771529778][295 ms][DEBUG] targetPkg: running [2025-08-22 22:20:05][350656771529778][295 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 22:20:05][350656771529778][295 ms][DEBUG] START check_boot_completed [2025-08-22 22:20:05][350656771529778][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:20:05][350656771529778][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 22:20:05][350656771529778][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:20:05][350656771529778][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:20:05][350656771529778][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 22:20:05][350656771529778][373 ms][DEBUG] START check_internet [2025-08-22 22:20:05][350656771529778][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:20:06][350656771529778][873 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.705/201.705/201.705/0.000 ms\n [2025-08-22 22:20:06][350656771529778][873 ms][DEBUG] check_internet: online [2025-08-22 22:20:06][350656771529778][873 ms][DEBUG] END check_internet in 500 ms [2025-08-22 22:20:06][350656771529778][873 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:20:06][350656771529778][874 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350656771529778\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTG\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9000\"}'\'' -e'"" [2025-08-22 22:20:06][350656771529778][874 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:20:06][350656771529778][874 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350656771529778\",\"model\":\"SM-S928B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTG\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9000\"}'\'' -e'"" [2025-08-22 22:20:11][350656771529778][6122 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8920fb10-595b-42bd-92db-9790c1f58f3c","id":"QR_8920fb10-595b-42bd-92db-9790c1f58f3c","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:20:11][350656771529778][6278 ms][DEBUG] proc_open done in 5404 ms; code=255; res.len=3343 [2025-08-22 22:20:11][350656771529778][6278 ms][DEBUG] END runCmdUntilRes#1 in 5404 ms [2025-08-22 22:20:11][350656771529778][6278 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:22:03][355088850351749][0 ms][INFO] === Request start === [2025-08-22 22:22:03][355088850351749][1 ms][DEBUG] START check_scloud [2025-08-22 22:22:03][355088850351749][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:22:03][355088850351749][312 ms][DEBUG] SU: done in 311 ms; outu0_a118 30345 4970 24329724 194852 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:22:03][355088850351749][312 ms][DEBUG] targetPkg: running [2025-08-22 22:22:03][355088850351749][312 ms][DEBUG] END check_scloud in 311 ms [2025-08-22 22:22:03][355088850351749][312 ms][DEBUG] START check_boot_completed [2025-08-22 22:22:03][355088850351749][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:22:03][355088850351749][359 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:22:03][355088850351749][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:22:03][355088850351749][422 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 22:22:03][355088850351749][422 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 22:22:03][355088850351749][422 ms][DEBUG] START check_internet [2025-08-22 22:22:03][355088850351749][422 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:22:04][355088850351749][968 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.537/200.537/200.537/0.000 ms\n [2025-08-22 22:22:04][355088850351749][968 ms][DEBUG] check_internet: online [2025-08-22 22:22:04][355088850351749][968 ms][DEBUG] END check_internet in 546 ms [2025-08-22 22:22:04][355088850351749][968 ms][DEBUG] rawBody.length=1148 [2025-08-22 22:22:04][355088850351749][968 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088850351749\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1227\"}'\'' -e'"" [2025-08-22 22:22:04][355088850351749][968 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:22:04][355088850351749][968 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355088850351749\",\"model\":\"SM-A256B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC1227\"}'\'' -e'"" [2025-08-22 22:22:08][355088850351749][5061 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_81f7c3fb-9f3c-45dd-92e8-a98e4fcd337f","id":"QR_81f7c3fb-9f3c-45dd-92e8-a98e4fcd337f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:22:08][355088850351749][5217 ms][DEBUG] proc_open done in 4249 ms; code=255; res.len=3343 [2025-08-22 22:22:08][355088850351749][5217 ms][DEBUG] END runCmdUntilRes#1 in 4249 ms [2025-08-22 22:22:08][355088850351749][5217 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:27:04][359194360762940][1 ms][INFO] === Request start === [2025-08-22 22:27:04][359194360762940][2 ms][DEBUG] START check_scloud [2025-08-22 22:27:04][359194360762940][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:27:05][359194360762940][313 ms][DEBUG] SU: done in 311 ms; outu0_a118 30345 4970 24433248 206704 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:27:05][359194360762940][313 ms][DEBUG] targetPkg: running [2025-08-22 22:27:05][359194360762940][313 ms][DEBUG] END check_scloud in 312 ms [2025-08-22 22:27:05][359194360762940][313 ms][DEBUG] START check_boot_completed [2025-08-22 22:27:05][359194360762940][313 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:27:05][359194360762940][360 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:27:05][359194360762940][360 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:27:05][359194360762940][407 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:27:05][359194360762940][407 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 22:27:05][359194360762940][407 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:27:05][359194360762940][407 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359194360762940\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3571\"}'\'' -e'"" [2025-08-22 22:27:05][359194360762940][407 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:27:05][359194360762940][407 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359194360762940\",\"model\":\"SM-G780G\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3571\"}'\'' -e'"" [2025-08-22 22:27:10][359194360762940][6124 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_478faee9-7050-4c02-8889-fd911a2c753b","id":"QR_478faee9-7050-4c02-8889-fd911a2c753b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:27:11][359194360762940][6280 ms][DEBUG] proc_open done in 5873 ms; code=255; res.len=3343 [2025-08-22 22:27:11][359194360762940][6280 ms][DEBUG] END runCmdUntilRes#1 in 5873 ms [2025-08-22 22:27:11][359194360762940][6280 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:27:17][350341128574658][1 ms][INFO] === Request start === [2025-08-22 22:27:17][350341128574658][2 ms][DEBUG] START check_scloud [2025-08-22 22:27:17][350341128574658][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:27:17][350341128574658][262 ms][DEBUG] SU: done in 261 ms; outu0_a118 30345 4970 24567656 217748 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:27:17][350341128574658][262 ms][DEBUG] targetPkg: running [2025-08-22 22:27:17][350341128574658][262 ms][DEBUG] END check_scloud in 261 ms [2025-08-22 22:27:17][350341128574658][262 ms][DEBUG] START check_boot_completed [2025-08-22 22:27:17][350341128574658][263 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:27:17][350341128574658][309 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:27:17][350341128574658][309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:27:17][350341128574658][372 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 22:27:17][350341128574658][372 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 22:27:17][350341128574658][372 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:27:17][350341128574658][372 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341128574658\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7145\"}'\'' -e'"" [2025-08-22 22:27:17][350341128574658][372 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:27:17][350341128574658][372 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350341128574658\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7145\"}'\'' -e'"" [2025-08-22 22:27:22][350341128574658][5245 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_ffb8c545-f8db-42a2-a049-87b0f6f374fc","id":"QR_ffb8c545-f8db-42a2-a049-87b0f6f374fc","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:27:22][350341128574658][5401 ms][DEBUG] proc_open done in 5029 ms; code=255; res.len=3343 [2025-08-22 22:27:22][350341128574658][5402 ms][DEBUG] END runCmdUntilRes#1 in 5030 ms [2025-08-22 22:27:22][350341128574658][5402 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:29:05][352822350590767][0 ms][INFO] === Request start === [2025-08-22 22:29:05][352822350590767][0 ms][DEBUG] START check_scloud [2025-08-22 22:29:05][352822350590767][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:29:05][352822350590767][298 ms][DEBUG] SU: done in 298 ms; outu0_a118 30345 4970 24681384 229752 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:29:05][352822350590767][298 ms][DEBUG] targetPkg: running [2025-08-22 22:29:05][352822350590767][298 ms][DEBUG] END check_scloud in 298 ms [2025-08-22 22:29:05][352822350590767][298 ms][DEBUG] START check_boot_completed [2025-08-22 22:29:05][352822350590767][299 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:29:05][352822350590767][344 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:29:05][352822350590767][344 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:29:05][352822350590767][392 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 22:29:05][352822350590767][392 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 22:29:05][352822350590767][392 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:29:05][352822350590767][392 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350590767\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2652\"}'\'' -e'"" [2025-08-22 22:29:05][352822350590767][392 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:29:05][352822350590767][392 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352822350590767\",\"model\":\"SM-M135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ARO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC2652\"}'\'' -e'"" [2025-08-22 22:29:11][352822350590767][6593 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f04bf111-f36a-4815-b0c4-a37d1747f185","id":"QR_f04bf111-f36a-4815-b0c4-a37d1747f185","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:29:11][352822350590767][6749 ms][DEBUG] proc_open done in 6356 ms; code=255; res.len=3343 [2025-08-22 22:29:11][352822350590767][6749 ms][DEBUG] END runCmdUntilRes#1 in 6356 ms [2025-08-22 22:29:11][352822350590767][6749 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:30:04][351864713718041][0 ms][INFO] === Request start === [2025-08-22 22:30:04][351864713718041][1 ms][DEBUG] START check_scloud [2025-08-22 22:30:04][351864713718041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:30:04][351864713718041][300 ms][DEBUG] SU: done in 299 ms; outu0_a118 30345 4970 24789132 240668 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:30:04][351864713718041][300 ms][DEBUG] targetPkg: running [2025-08-22 22:30:04][351864713718041][300 ms][DEBUG] END check_scloud in 299 ms [2025-08-22 22:30:04][351864713718041][300 ms][DEBUG] START check_boot_completed [2025-08-22 22:30:04][351864713718041][300 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:30:04][351864713718041][331 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 22:30:04][351864713718041][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:30:04][351864713718041][378 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:30:04][351864713718041][378 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 22:30:04][351864713718041][378 ms][DEBUG] START check_internet [2025-08-22 22:30:04][351864713718041][378 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:30:05][351864713718041][800 ms][DEBUG] SU: done in 422 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.913/200.913/200.913/0.000 ms\n [2025-08-22 22:30:05][351864713718041][800 ms][DEBUG] check_internet: online [2025-08-22 22:30:05][351864713718041][800 ms][DEBUG] END check_internet in 422 ms [2025-08-22 22:30:05][351864713718041][800 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:30:05][351864713718041][800 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864713718041\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5882\"}'\'' -e'"" [2025-08-22 22:30:05][351864713718041][800 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:30:05][351864713718041][800 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864713718041\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5882\"}'\'' -e'"" [2025-08-22 22:30:08][351864713718041][4534 ms][DEBUG] proc_open done in 3734 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 22:30:08][351864713718041][4534 ms][DEBUG] END runCmdUntilRes#1 in 3734 ms [2025-08-22 22:30:08][351864713718041][4534 ms][WARN] Detected error: Process with pid 30345 either refused to load frida-agent, or terminated during injection [2025-08-22 22:30:08][351864713718041][4534 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 22:30:09][351864713718041][4690 ms][DEBUG] SU: done in 156 ms; out [2025-08-22 22:30:09][351864713718041][4690 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 22:30:09][351864713718041][4690 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 22:30:09][351864713718041][4815 ms][DEBUG] SU: done in 125 ms; out [2025-08-22 22:30:09][351864713718041][4815 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 22:30:09][351864713718041][4972 ms][DEBUG] SU: done in 157 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 22:30:11][351864713718041][6986 ms][DEBUG] START check_boot_completed [2025-08-22 22:30:11][351864713718041][6986 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:30:11][351864713718041][7033 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:30:11][351864713718041][7033 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:30:11][351864713718041][7080 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:30:11][351864713718041][7080 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 22:30:14][351864713718041][10094 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 22:30:14][351864713718041][10094 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864713718041\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5882\"}'\'' -e'"" [2025-08-22 22:30:20][351864713718041][15874 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-22 22:30:20][351864713718041][16031 ms][DEBUG] proc_open done in 5936 ms; code=255; res.len=101 [2025-08-22 22:30:20][351864713718041][16031 ms][DEBUG] END runCmdUntilRes#2 in 5937 ms [2025-08-22 22:30:20][351864713718041][16031 ms][INFO] SUCCESS response from frida (len=101) [2025-08-22 22:30:20][][0 ms][INFO] === Request start === [2025-08-22 22:30:20][][1 ms][DEBUG] START check_scloud [2025-08-22 22:30:20][][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:30:20][][237 ms][DEBUG] SU: done in 236 ms; outu0_a118 31769 4970 23637176 123996 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:30:20][][237 ms][DEBUG] targetPkg: running [2025-08-22 22:30:20][][237 ms][DEBUG] END check_scloud in 236 ms [2025-08-22 22:30:20][][237 ms][DEBUG] START check_boot_completed [2025-08-22 22:30:20][][237 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:30:20][][283 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:30:20][][283 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:30:21][][330 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:30:21][][331 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 22:30:21][][331 ms][DEBUG] START check_internet [2025-08-22 22:30:21][][331 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:30:21][][830 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.485/202.485/202.485/0.000 ms\n [2025-08-22 22:30:21][][830 ms][DEBUG] check_internet: online [2025-08-22 22:30:21][][831 ms][DEBUG] END check_internet in 500 ms [2025-08-22 22:30:21][][831 ms][DEBUG] rawBody.length=1130 [2025-08-22 22:30:21][][831 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X20QGFDL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3152\"}'\'' -e'"" [2025-08-22 22:30:21][][831 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:30:21][][831 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"RF8X20QGFDL\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3152\"}'\'' -e'"" [2025-08-22 22:30:26][][6266 ms][DEBUG] frida res:res:{"code":4005007,"message":"DEVICE_NOT_VALID_FOR_ENROLLMENT","data":"DEVICE_NOT_VALID_FOR_ENROLLMENT"}\r\n [2025-08-22 22:30:27][][6423 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=101 [2025-08-22 22:30:27][][6423 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-08-22 22:30:27][][6423 ms][INFO] SUCCESS response from frida (len=101) [2025-08-22 22:30:27][351864713718041][0 ms][INFO] === Request start === [2025-08-22 22:30:27][351864713718041][1 ms][DEBUG] START check_scloud [2025-08-22 22:30:27][351864713718041][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:30:28][351864713718041][293 ms][DEBUG] SU: done in 292 ms; outu0_a118 31769 4970 23836172 137032 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:30:28][351864713718041][293 ms][DEBUG] targetPkg: running [2025-08-22 22:30:28][351864713718041][293 ms][DEBUG] END check_scloud in 292 ms [2025-08-22 22:30:28][351864713718041][293 ms][DEBUG] START check_boot_completed [2025-08-22 22:30:28][351864713718041][293 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:30:28][351864713718041][324 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 22:30:28][351864713718041][324 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:30:28][351864713718041][371 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:30:28][351864713718041][371 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 22:30:28][351864713718041][371 ms][DEBUG] START check_internet [2025-08-22 22:30:28][351864713718041][371 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:30:28][351864713718041][699 ms][DEBUG] SU: done in 328 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=225 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 225.252/225.252/225.252/0.000 ms\n [2025-08-22 22:30:28][351864713718041][699 ms][DEBUG] check_internet: online [2025-08-22 22:30:28][351864713718041][699 ms][DEBUG] END check_internet in 328 ms [2025-08-22 22:30:28][351864713718041][699 ms][DEBUG] rawBody.length=1148 [2025-08-22 22:30:28][351864713718041][699 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864713718041\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4350\"}'\'' -e'"" [2025-08-22 22:30:28][351864713718041][699 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:30:28][351864713718041][699 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351864713718041\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTC\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4350\"}'\'' -e'"" [2025-08-22 22:30:32][351864713718041][4385 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_960fe3ac-55fe-496e-9069-25a55c5ca76a","id":"QR_960fe3ac-55fe-496e-9069-25a55c5ca76a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:30:32][351864713718041][4542 ms][DEBUG] proc_open done in 3842 ms; code=255; res.len=3343 [2025-08-22 22:30:32][351864713718041][4542 ms][DEBUG] END runCmdUntilRes#1 in 3843 ms [2025-08-22 22:30:32][351864713718041][4542 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:32:03][357450473552343][1 ms][INFO] === Request start === [2025-08-22 22:32:03][357450473552343][2 ms][DEBUG] START check_scloud [2025-08-22 22:32:03][357450473552343][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:32:04][357450473552343][315 ms][DEBUG] SU: done in 313 ms; outu0_a118 31769 4970 23887088 149052 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:32:04][357450473552343][315 ms][DEBUG] targetPkg: running [2025-08-22 22:32:04][357450473552343][315 ms][DEBUG] END check_scloud in 313 ms [2025-08-22 22:32:04][357450473552343][315 ms][DEBUG] START check_boot_completed [2025-08-22 22:32:04][357450473552343][315 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:32:04][357450473552343][362 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:32:04][357450473552343][362 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:32:04][357450473552343][408 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:32:04][357450473552343][408 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 22:32:04][357450473552343][408 ms][DEBUG] START check_internet [2025-08-22 22:32:04][357450473552343][408 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:32:04][357450473552343][690 ms][DEBUG] SU: done in 281 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=174 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 174.318/174.318/174.318/0.000 ms\n [2025-08-22 22:32:04][357450473552343][690 ms][DEBUG] check_internet: online [2025-08-22 22:32:04][357450473552343][690 ms][DEBUG] END check_internet in 282 ms [2025-08-22 22:32:04][357450473552343][690 ms][DEBUG] rawBody.length=1148 [2025-08-22 22:32:04][357450473552343][690 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473552343\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7010\"}'\'' -e'"" [2025-08-22 22:32:04][357450473552343][690 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:32:04][357450473552343][690 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357450473552343\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"EUB\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7010\"}'\'' -e'"" [2025-08-22 22:32:08][357450473552343][4814 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_83944343-b6be-48cb-8e65-bdd352fdee73","id":"QR_83944343-b6be-48cb-8e65-bdd352fdee73","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:32:08][357450473552343][4970 ms][DEBUG] proc_open done in 4279 ms; code=255; res.len=3343 [2025-08-22 22:32:08][357450473552343][4970 ms][DEBUG] END runCmdUntilRes#1 in 4280 ms [2025-08-22 22:32:08][357450473552343][4970 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:35:03][359156948241267][0 ms][INFO] === Request start === [2025-08-22 22:35:03][359156948241267][0 ms][DEBUG] START check_scloud [2025-08-22 22:35:03][359156948241267][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:35:03][359156948241267][297 ms][DEBUG] SU: done in 297 ms; outu0_a118 31769 4970 23983560 160628 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:35:03][359156948241267][297 ms][DEBUG] targetPkg: running [2025-08-22 22:35:03][359156948241267][297 ms][DEBUG] END check_scloud in 297 ms [2025-08-22 22:35:03][359156948241267][297 ms][DEBUG] START check_boot_completed [2025-08-22 22:35:03][359156948241267][297 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:35:03][359156948241267][328 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 22:35:03][359156948241267][328 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:35:03][359156948241267][375 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:35:03][359156948241267][375 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 22:35:03][359156948241267][375 ms][DEBUG] rawBody.length=1148 [2025-08-22 22:35:03][359156948241267][375 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156948241267\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7100\"}'\'' -e'"" [2025-08-22 22:35:03][359156948241267][375 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:35:03][359156948241267][376 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"359156948241267\",\"model\":\"SM-A155M\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"LTY\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC7100\"}'\'' -e'"" [2025-08-22 22:35:07][359156948241267][4390 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_b170caeb-ddcc-4ba2-a8a8-cb171efa36a1","id":"QR_b170caeb-ddcc-4ba2-a8a8-cb171efa36a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:35:07][359156948241267][4546 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-22 22:35:07][359156948241267][4546 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-22 22:35:07][359156948241267][4546 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:37:04][356927260422294][1 ms][INFO] === Request start === [2025-08-22 22:37:04][356927260422294][2 ms][DEBUG] START check_scloud [2025-08-22 22:37:04][356927260422294][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:37:04][356927260422294][296 ms][DEBUG] SU: done in 294 ms; outu0_a118 31769 4970 24166088 171636 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:37:04][356927260422294][296 ms][DEBUG] targetPkg: running [2025-08-22 22:37:04][356927260422294][296 ms][DEBUG] END check_scloud in 294 ms [2025-08-22 22:37:04][356927260422294][296 ms][DEBUG] START check_boot_completed [2025-08-22 22:37:04][356927260422294][296 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:37:05][356927260422294][343 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:37:05][356927260422294][343 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:37:05][356927260422294][405 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 22:37:05][356927260422294][406 ms][DEBUG] END check_boot_completed in 110 ms [2025-08-22 22:37:05][356927260422294][406 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:37:05][356927260422294][406 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927260422294\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4728\"}'\'' -e'"" [2025-08-22 22:37:05][356927260422294][406 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:37:05][356927260422294][406 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356927260422294\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"BVO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4728\"}'\'' -e'"" [2025-08-22 22:37:10][356927260422294][5763 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_08d7e6d8-c42e-436d-99ed-4c838664fac2","id":"QR_08d7e6d8-c42e-436d-99ed-4c838664fac2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:37:10][356927260422294][5919 ms][DEBUG] proc_open done in 5513 ms; code=255; res.len=3343 [2025-08-22 22:37:10][356927260422294][5919 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-22 22:37:10][356927260422294][5919 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:38:04][353313360882310][0 ms][INFO] === Request start === [2025-08-22 22:38:04][353313360882310][1 ms][DEBUG] START check_scloud [2025-08-22 22:38:04][353313360882310][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:38:04][353313360882310][316 ms][DEBUG] SU: done in 315 ms; outu0_a118 31769 4970 24295852 184240 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:38:04][353313360882310][316 ms][DEBUG] targetPkg: running [2025-08-22 22:38:04][353313360882310][316 ms][DEBUG] END check_scloud in 315 ms [2025-08-22 22:38:04][353313360882310][316 ms][DEBUG] START check_boot_completed [2025-08-22 22:38:04][353313360882310][316 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:38:04][353313360882310][363 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:38:04][353313360882310][363 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:38:04][353313360882310][426 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 22:38:04][353313360882310][426 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 22:38:04][353313360882310][426 ms][DEBUG] START check_internet [2025-08-22 22:38:04][353313360882310][426 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:38:05][353313360882310][988 ms][DEBUG] SU: done in 562 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.671/200.671/200.671/0.000 ms\n [2025-08-22 22:38:05][353313360882310][988 ms][DEBUG] check_internet: online [2025-08-22 22:38:05][353313360882310][988 ms][DEBUG] END check_internet in 562 ms [2025-08-22 22:38:05][353313360882310][988 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:38:05][353313360882310][988 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360882310\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6114\"}'\'' -e'"" [2025-08-22 22:38:05][353313360882310][988 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:38:05][353313360882310][988 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353313360882310\",\"model\":\"SM-A356E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTM\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC6114\"}'\'' -e'"" [2025-08-22 22:38:11][353313360882310][7674 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_700bffa7-3717-49f0-8832-7f3a9a24c5c9","id":"QR_700bffa7-3717-49f0-8832-7f3a9a24c5c9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:38:12][353313360882310][7830 ms][DEBUG] proc_open done in 6841 ms; code=255; res.len=3343 [2025-08-22 22:38:12][353313360882310][7830 ms][DEBUG] END runCmdUntilRes#1 in 6842 ms [2025-08-22 22:38:12][353313360882310][7830 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:39:04][355561773187556][0 ms][INFO] === Request start === [2025-08-22 22:39:04][355561773187556][1 ms][DEBUG] START check_scloud [2025-08-22 22:39:04][355561773187556][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:39:05][355561773187556][292 ms][DEBUG] SU: done in 291 ms; outu0_a118 31769 4970 24416912 195352 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:39:05][355561773187556][292 ms][DEBUG] targetPkg: running [2025-08-22 22:39:05][355561773187556][292 ms][DEBUG] END check_scloud in 291 ms [2025-08-22 22:39:05][355561773187556][292 ms][DEBUG] START check_boot_completed [2025-08-22 22:39:05][355561773187556][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:39:05][355561773187556][339 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:39:05][355561773187556][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:39:05][355561773187556][417 ms][DEBUG] SU: done in 78 ms; out [2025-08-22 22:39:05][355561773187556][417 ms][DEBUG] END check_boot_completed in 125 ms [2025-08-22 22:39:05][355561773187556][417 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:39:05][355561773187556][417 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355561773187556\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7134\"}'\'' -e'"" [2025-08-22 22:39:05][355561773187556][417 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:39:05][355561773187556][417 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355561773187556\",\"model\":\"SM-A326U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TMB\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7134\"}'\'' -e'"" [2025-08-22 22:39:10][355561773187556][5275 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c48ea840-0974-487e-8290-467ae17ccd6a","id":"QR_c48ea840-0974-487e-8290-467ae17ccd6a","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:39:10][355561773187556][5431 ms][DEBUG] proc_open done in 5014 ms; code=255; res.len=3343 [2025-08-22 22:39:10][355561773187556][5431 ms][DEBUG] END runCmdUntilRes#1 in 5014 ms [2025-08-22 22:39:10][355561773187556][5431 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:48:04][350792529369876][1 ms][INFO] === Request start === [2025-08-22 22:48:04][350792529369876][2 ms][DEBUG] START check_scloud [2025-08-22 22:48:04][350792529369876][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:48:04][350792529369876][292 ms][DEBUG] SU: done in 290 ms; outu0_a118 31769 4970 24546088 207612 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:48:04][350792529369876][292 ms][DEBUG] targetPkg: running [2025-08-22 22:48:04][350792529369876][292 ms][DEBUG] END check_scloud in 290 ms [2025-08-22 22:48:04][350792529369876][292 ms][DEBUG] START check_boot_completed [2025-08-22 22:48:04][350792529369876][292 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:48:04][350792529369876][338 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:48:04][350792529369876][339 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:48:04][350792529369876][401 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 22:48:04][350792529369876][401 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 22:48:04][350792529369876][401 ms][DEBUG] START check_internet [2025-08-22 22:48:04][350792529369876][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:48:05][350792529369876][932 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.826/201.826/201.826/0.000 ms\n [2025-08-22 22:48:05][350792529369876][932 ms][DEBUG] check_internet: online [2025-08-22 22:48:05][350792529369876][932 ms][DEBUG] END check_internet in 531 ms [2025-08-22 22:48:05][350792529369876][932 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:48:05][350792529369876][932 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529369876\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5958\"}'\'' -e'"" [2025-08-22 22:48:05][350792529369876][932 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:48:05][350792529369876][932 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350792529369876\",\"model\":\"SM-A165M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"GTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC5958\"}'\'' -e'"" [2025-08-22 22:48:11][350792529369876][7321 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_7641d3cd-eaa6-4125-8595-65ba2dfe03f0","id":"QR_7641d3cd-eaa6-4125-8595-65ba2dfe03f0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:48:11][350792529369876][7477 ms][DEBUG] proc_open done in 6545 ms; code=255; res.len=3343 [2025-08-22 22:48:11][350792529369876][7477 ms][DEBUG] END runCmdUntilRes#1 in 6545 ms [2025-08-22 22:48:11][350792529369876][7477 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:49:04][352497330709355][0 ms][INFO] === Request start === [2025-08-22 22:49:04][352497330709355][0 ms][DEBUG] START check_scloud [2025-08-22 22:49:04][352497330709355][0 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:49:04][352497330709355][256 ms][DEBUG] SU: done in 256 ms; outu0_a118 31769 4970 24710104 218300 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:49:04][352497330709355][256 ms][DEBUG] targetPkg: running [2025-08-22 22:49:04][352497330709355][256 ms][DEBUG] END check_scloud in 256 ms [2025-08-22 22:49:04][352497330709355][256 ms][DEBUG] START check_boot_completed [2025-08-22 22:49:04][352497330709355][256 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:49:04][352497330709355][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:49:04][352497330709355][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:49:04][352497330709355][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:49:04][352497330709355][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 22:49:04][352497330709355][350 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:49:04][352497330709355][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352497330709355\",\"model\":\"SM-S901E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3975\"}'\'' -e'"" [2025-08-22 22:49:04][352497330709355][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:49:04][352497330709355][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352497330709355\",\"model\":\"SM-S901E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"TPA\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3975\"}'\'' -e'"" [2025-08-22 22:49:10][352497330709355][5942 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_52be77f9-41d9-4319-90b1-2d671ad88e68","id":"QR_52be77f9-41d9-4319-90b1-2d671ad88e68","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:49:10][352497330709355][6098 ms][DEBUG] proc_open done in 5749 ms; code=255; res.len=3343 [2025-08-22 22:49:10][352497330709355][6099 ms][DEBUG] END runCmdUntilRes#1 in 5749 ms [2025-08-22 22:49:10][352497330709355][6099 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:55:04][353353822805731][1 ms][INFO] === Request start === [2025-08-22 22:55:04][353353822805731][2 ms][DEBUG] START check_scloud [2025-08-22 22:55:04][353353822805731][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:55:04][353353822805731][308 ms][DEBUG] SU: done in 307 ms; outu0_a118 31769 4970 24823996 230556 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:55:04][353353822805731][309 ms][DEBUG] targetPkg: running [2025-08-22 22:55:04][353353822805731][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 22:55:04][353353822805731][309 ms][DEBUG] START check_boot_completed [2025-08-22 22:55:04][353353822805731][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:55:04][353353822805731][355 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:55:04][353353822805731][355 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:55:04][353353822805731][402 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:55:04][353353822805731][402 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 22:55:04][353353822805731][402 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:55:04][353353822805731][402 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353822805731\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2406\"}'\'' -e'"" [2025-08-22 22:55:04][353353822805731][402 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:55:04][353353822805731][402 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353353822805731\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"LTL\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC2406\"}'\'' -e'"" [2025-08-22 22:55:10][353353822805731][5838 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_8420e867-8d68-4383-89c6-b5e9008ab9b8","id":"QR_8420e867-8d68-4383-89c6-b5e9008ab9b8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:55:10][353353822805731][5994 ms][DEBUG] proc_open done in 5592 ms; code=255; res.len=3343 [2025-08-22 22:55:10][353353822805731][5994 ms][DEBUG] END runCmdUntilRes#1 in 5592 ms [2025-08-22 22:55:10][353353822805731][5995 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 22:56:05][351069502513443][0 ms][INFO] === Request start === [2025-08-22 22:56:05][351069502513443][1 ms][DEBUG] START check_scloud [2025-08-22 22:56:05][351069502513443][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 22:56:05][351069502513443][288 ms][DEBUG] SU: done in 287 ms; outu0_a118 31769 4970 24964388 240968 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 22:56:05][351069502513443][288 ms][DEBUG] targetPkg: running [2025-08-22 22:56:05][351069502513443][288 ms][DEBUG] END check_scloud in 287 ms [2025-08-22 22:56:05][351069502513443][288 ms][DEBUG] START check_boot_completed [2025-08-22 22:56:05][351069502513443][288 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:56:05][351069502513443][335 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 22:56:05][351069502513443][335 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:56:05][351069502513443][397 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 22:56:05][351069502513443][397 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 22:56:05][351069502513443][397 ms][DEBUG] START check_internet [2025-08-22 22:56:05][351069502513443][397 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 22:56:06][351069502513443][928 ms][DEBUG] SU: done in 531 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=198 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 198.919/198.919/198.919/0.000 ms\n [2025-08-22 22:56:06][351069502513443][928 ms][DEBUG] check_internet: online [2025-08-22 22:56:06][351069502513443][928 ms][DEBUG] END check_internet in 531 ms [2025-08-22 22:56:06][351069502513443][928 ms][DEBUG] rawBody.length=1149 [2025-08-22 22:56:06][351069502513443][928 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351069502513443\",\"model\":\"SM-M536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2006\"}'\'' -e'"" [2025-08-22 22:56:06][351069502513443][928 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 22:56:06][351069502513443][928 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351069502513443\",\"model\":\"SM-M536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2006\"}'\'' -e'"" [2025-08-22 22:56:09][351069502513443][4568 ms][DEBUG] proc_open done in 3640 ms (timeout); code=4; out.len=0 err.len=91 [2025-08-22 22:56:09][351069502513443][4568 ms][DEBUG] END runCmdUntilRes#1 in 3640 ms [2025-08-22 22:56:09][351069502513443][4568 ms][WARN] Detected error: Process with pid 31769 either refused to load frida-agent, or terminated during injection [2025-08-22 22:56:09][351069502513443][4568 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 22:56:10][351069502513443][4709 ms][DEBUG] SU: done in 141 ms; out [2025-08-22 22:56:10][351069502513443][4709 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 22:56:10][351069502513443][4709 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 22:56:10][351069502513443][4865 ms][DEBUG] SU: done in 155 ms; out [2025-08-22 22:56:10][351069502513443][4865 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 22:56:10][351069502513443][5021 ms][DEBUG] SU: done in 156 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 22:56:12][351069502513443][7036 ms][DEBUG] START check_boot_completed [2025-08-22 22:56:12][351069502513443][7036 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 22:56:12][351069502513443][7083 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 22:56:12][351069502513443][7083 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 22:56:12][351069502513443][7130 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 22:56:12][351069502513443][7130 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 22:56:15][351069502513443][10145 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 22:56:15][351069502513443][10145 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"351069502513443\",\"model\":\"SM-M536B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2006\"}'\'' -e'"" [2025-08-22 22:56:23][351069502513443][18252 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_f9b20184-71dc-495c-b24b-b7d4f216fe71","id":"QR_f9b20184-71dc-495c-b24b-b7d4f216fe71","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 22:56:23][351069502513443][18408 ms][DEBUG] proc_open done in 8264 ms; code=255; res.len=3343 [2025-08-22 22:56:23][351069502513443][18409 ms][DEBUG] END runCmdUntilRes#2 in 8264 ms [2025-08-22 22:56:23][351069502513443][18409 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:01:04][350181270636313][1 ms][INFO] === Request start === [2025-08-22 23:01:04][350181270636313][1 ms][DEBUG] START check_scloud [2025-08-22 23:01:04][350181270636313][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:01:05][350181270636313][302 ms][DEBUG] SU: done in 301 ms; outu0_a118 1228 4970 23508416 127384 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:01:05][350181270636313][302 ms][DEBUG] targetPkg: running [2025-08-22 23:01:05][350181270636313][302 ms][DEBUG] END check_scloud in 301 ms [2025-08-22 23:01:05][350181270636313][302 ms][DEBUG] START check_boot_completed [2025-08-22 23:01:05][350181270636313][302 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:01:05][350181270636313][334 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 23:01:05][350181270636313][334 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:01:05][350181270636313][381 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:01:05][350181270636313][381 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 23:01:05][350181270636313][381 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:01:05][350181270636313][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350181270636313\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2604\"}'\'' -e'"" [2025-08-22 23:01:05][350181270636313][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:01:05][350181270636313][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350181270636313\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"COM\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC2604\"}'\'' -e'"" [2025-08-22 23:01:11][350181270636313][6879 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_57450658-9b54-46b4-a5d3-6e197aef7cf4","id":"QR_57450658-9b54-46b4-a5d3-6e197aef7cf4","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:01:11][350181270636313][7035 ms][DEBUG] proc_open done in 6654 ms; code=255; res.len=3343 [2025-08-22 23:01:11][350181270636313][7035 ms][DEBUG] END runCmdUntilRes#1 in 6654 ms [2025-08-22 23:01:11][350181270636313][7035 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:03:03][350956650165441][1 ms][INFO] === Request start === [2025-08-22 23:03:03][350956650165441][2 ms][DEBUG] START check_scloud [2025-08-22 23:03:03][350956650165441][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:03:03][350956650165441][257 ms][DEBUG] SU: done in 255 ms; outu0_a118 1228 4970 23621988 138424 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:03:03][350956650165441][257 ms][DEBUG] targetPkg: running [2025-08-22 23:03:03][350956650165441][257 ms][DEBUG] END check_scloud in 255 ms [2025-08-22 23:03:03][350956650165441][257 ms][DEBUG] START check_boot_completed [2025-08-22 23:03:03][350956650165441][257 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:03:03][350956650165441][303 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 23:03:03][350956650165441][303 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:03:03][350956650165441][350 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:03:03][350956650165441][350 ms][DEBUG] END check_boot_completed in 93 ms [2025-08-22 23:03:03][350956650165441][350 ms][DEBUG] rawBody.length=1148 [2025-08-22 23:03:03][350956650165441][350 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350956650165441\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1576\"}'\'' -e'"" [2025-08-22 23:03:03][350956650165441][350 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:03:03][350956650165441][350 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350956650165441\",\"model\":\"SM-S918B\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ATS\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC1576\"}'\'' -e'"" [2025-08-22 23:03:07][350956650165441][4318 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_30d3c941-01c9-4826-bbaa-c9939034730d","id":"QR_30d3c941-01c9-4826-bbaa-c9939034730d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:03:08][350956650165441][4474 ms][DEBUG] proc_open done in 4124 ms; code=255; res.len=3343 [2025-08-22 23:03:08][350956650165441][4474 ms][DEBUG] END runCmdUntilRes#1 in 4124 ms [2025-08-22 23:03:08][350956650165441][4474 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:07:04][353600814856324][1 ms][INFO] === Request start === [2025-08-22 23:07:04][353600814856324][2 ms][DEBUG] START check_scloud [2025-08-22 23:07:04][353600814856324][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:07:05][353600814856324][309 ms][DEBUG] SU: done in 307 ms; outu0_a118 1228 4970 23725448 148648 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:07:05][353600814856324][309 ms][DEBUG] targetPkg: running [2025-08-22 23:07:05][353600814856324][309 ms][DEBUG] END check_scloud in 307 ms [2025-08-22 23:07:05][353600814856324][309 ms][DEBUG] START check_boot_completed [2025-08-22 23:07:05][353600814856324][309 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:07:05][353600814856324][340 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 23:07:05][353600814856324][340 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:07:05][353600814856324][403 ms][DEBUG] SU: done in 63 ms; out [2025-08-22 23:07:05][353600814856324][403 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 23:07:05][353600814856324][403 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:07:05][353600814856324][403 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600814856324\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9751\"}'\'' -e'"" [2025-08-22 23:07:05][353600814856324][403 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:07:05][353600814856324][403 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353600814856324\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC9751\"}'\'' -e'"" [2025-08-22 23:07:10][353600814856324][5574 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_fbc0160d-aec2-47ab-a031-ce2b58b0ca8f","id":"QR_fbc0160d-aec2-47ab-a031-ce2b58b0ca8f","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:07:10][353600814856324][5730 ms][DEBUG] proc_open done in 5326 ms; code=255; res.len=3343 [2025-08-22 23:07:10][353600814856324][5730 ms][DEBUG] END runCmdUntilRes#1 in 5326 ms [2025-08-22 23:07:10][353600814856324][5730 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:10:05][354818253091604][1 ms][INFO] === Request start === [2025-08-22 23:10:05][354818253091604][2 ms][DEBUG] START check_scloud [2025-08-22 23:10:05][354818253091604][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:10:05][354818253091604][326 ms][DEBUG] SU: done in 325 ms; outu0_a118 1228 4970 23831020 120348 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:10:05][354818253091604][326 ms][DEBUG] targetPkg: running [2025-08-22 23:10:05][354818253091604][326 ms][DEBUG] END check_scloud in 325 ms [2025-08-22 23:10:05][354818253091604][326 ms][DEBUG] START check_boot_completed [2025-08-22 23:10:05][354818253091604][326 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:10:05][354818253091604][358 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 23:10:05][354818253091604][358 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:10:05][354818253091604][405 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:10:05][354818253091604][405 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 23:10:05][354818253091604][405 ms][DEBUG] START check_internet [2025-08-22 23:10:05][354818253091604][405 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 23:10:05][354818253091604][905 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.657/202.657/202.657/0.000 ms\n [2025-08-22 23:10:05][354818253091604][905 ms][DEBUG] check_internet: online [2025-08-22 23:10:05][354818253091604][905 ms][DEBUG] END check_internet in 500 ms [2025-08-22 23:10:05][354818253091604][905 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:10:05][354818253091604][905 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818253091604\",\"model\":\"SM-S901W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4924\"}'\'' -e'"" [2025-08-22 23:10:05][354818253091604][905 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:10:05][354818253091604][905 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"354818253091604\",\"model\":\"SM-S901W\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAC\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC4924\"}'\'' -e'"" [2025-08-22 23:10:11][354818253091604][6559 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_0eeb0186-ae62-4f2b-a864-79bc38fe05a2","id":"QR_0eeb0186-ae62-4f2b-a864-79bc38fe05a2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:10:11][354818253091604][6716 ms][DEBUG] proc_open done in 5810 ms; code=255; res.len=3343 [2025-08-22 23:10:11][354818253091604][6716 ms][DEBUG] END runCmdUntilRes#1 in 5810 ms [2025-08-22 23:10:11][354818253091604][6716 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:12:04][356544399288601][1 ms][INFO] === Request start === [2025-08-22 23:12:04][356544399288601][2 ms][DEBUG] START check_scloud [2025-08-22 23:12:04][356544399288601][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:12:04][356544399288601][271 ms][DEBUG] SU: done in 269 ms; outu0_a118 1228 4970 23940624 136864 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:12:04][356544399288601][271 ms][DEBUG] targetPkg: running [2025-08-22 23:12:04][356544399288601][271 ms][DEBUG] END check_scloud in 270 ms [2025-08-22 23:12:04][356544399288601][271 ms][DEBUG] START check_boot_completed [2025-08-22 23:12:04][356544399288601][271 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:12:04][356544399288601][318 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 23:12:04][356544399288601][318 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:12:04][356544399288601][366 ms][DEBUG] SU: done in 48 ms; out [2025-08-22 23:12:04][356544399288601][366 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 23:12:04][356544399288601][366 ms][DEBUG] START check_internet [2025-08-22 23:12:04][356544399288601][366 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 23:12:05][356544399288601][818 ms][DEBUG] SU: done in 452 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.164/202.164/202.164/0.000 ms\n [2025-08-22 23:12:05][356544399288601][818 ms][DEBUG] check_internet: online [2025-08-22 23:12:05][356544399288601][818 ms][DEBUG] END check_internet in 452 ms [2025-08-22 23:12:05][356544399288601][818 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:12:05][356544399288601][818 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544399288601\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6890\"}'\'' -e'"" [2025-08-22 23:12:05][356544399288601][818 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:12:05][356544399288601][819 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356544399288601\",\"model\":\"SM-A546E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC6890\"}'\'' -e'"" [2025-08-22 23:12:12][356544399288601][7707 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_be4cf290-95e5-49e5-a1fc-e958e80902f1","id":"QR_be4cf290-95e5-49e5-a1fc-e958e80902f1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:12:12][356544399288601][7863 ms][DEBUG] proc_open done in 7044 ms; code=255; res.len=3343 [2025-08-22 23:12:12][356544399288601][7863 ms][DEBUG] END runCmdUntilRes#1 in 7045 ms [2025-08-22 23:12:12][356544399288601][7863 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:22:03][357026894599350][1 ms][INFO] === Request start === [2025-08-22 23:22:03][357026894599350][2 ms][DEBUG] START check_scloud [2025-08-22 23:22:03][357026894599350][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:22:04][357026894599350][274 ms][DEBUG] SU: done in 272 ms; outu0_a118 1228 4970 24067624 148340 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:22:04][357026894599350][274 ms][DEBUG] targetPkg: running [2025-08-22 23:22:04][357026894599350][274 ms][DEBUG] END check_scloud in 272 ms [2025-08-22 23:22:04][357026894599350][274 ms][DEBUG] START check_boot_completed [2025-08-22 23:22:04][357026894599350][274 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:22:04][357026894599350][321 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 23:22:04][357026894599350][321 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:22:04][357026894599350][367 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:22:04][357026894599350][368 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 23:22:04][357026894599350][368 ms][DEBUG] START check_internet [2025-08-22 23:22:04][357026894599350][368 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 23:22:04][357026894599350][914 ms][DEBUG] SU: done in 546 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.340/201.340/201.340/0.000 ms\n [2025-08-22 23:22:04][357026894599350][914 ms][DEBUG] check_internet: online [2025-08-22 23:22:04][357026894599350][914 ms][DEBUG] END check_internet in 547 ms [2025-08-22 23:22:04][357026894599350][914 ms][DEBUG] rawBody.length=1148 [2025-08-22 23:22:04][357026894599350][914 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026894599350\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7763\"}'\'' -e'"" [2025-08-22 23:22:04][357026894599350][914 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:22:04][357026894599350][914 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"357026894599350\",\"model\":\"SM-A127F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"ACR\",\"os\":\"10\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC7763\"}'\'' -e'"" [2025-08-22 23:22:09][357026894599350][5288 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_606e4cc2-ae72-4be8-9c34-7998febe4af0","id":"QR_606e4cc2-ae72-4be8-9c34-7998febe4af0","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:22:09][357026894599350][5444 ms][DEBUG] proc_open done in 4530 ms; code=255; res.len=3343 [2025-08-22 23:22:09][357026894599350][5444 ms][DEBUG] END runCmdUntilRes#1 in 4530 ms [2025-08-22 23:22:09][357026894599350][5444 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:22:13][352967355109996][0 ms][INFO] === Request start === [2025-08-22 23:22:13][352967355109996][1 ms][DEBUG] START check_scloud [2025-08-22 23:22:13][352967355109996][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:22:13][352967355109996][307 ms][DEBUG] SU: done in 306 ms; outu0_a118 1228 4970 24268668 160228 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:22:13][352967355109996][307 ms][DEBUG] targetPkg: running [2025-08-22 23:22:13][352967355109996][307 ms][DEBUG] END check_scloud in 306 ms [2025-08-22 23:22:13][352967355109996][307 ms][DEBUG] START check_boot_completed [2025-08-22 23:22:13][352967355109996][307 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:22:13][352967355109996][354 ms][DEBUG] ADB: done in 46 ms; out [2025-08-22 23:22:13][352967355109996][354 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:22:13][352967355109996][401 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:22:13][352967355109996][401 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 23:22:13][352967355109996][401 ms][DEBUG] START check_internet [2025-08-22 23:22:13][352967355109996][401 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 23:22:14][352967355109996][760 ms][DEBUG] SU: done in 359 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=242 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 242.934/242.934/242.934/0.000 ms\n [2025-08-22 23:22:14][352967355109996][760 ms][DEBUG] check_internet: online [2025-08-22 23:22:14][352967355109996][760 ms][DEBUG] END check_internet in 359 ms [2025-08-22 23:22:14][352967355109996][760 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:22:14][352967355109996][760 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355109996\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2164\"}'\'' -e'"" [2025-08-22 23:22:14][352967355109996][760 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:22:14][352967355109996][760 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"352967355109996\",\"model\":\"SM-A135M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"11\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC2164\"}'\'' -e'"" [2025-08-22 23:22:19][352967355109996][6118 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_2d0a3256-76ea-434a-b744-31a2be727034","id":"QR_2d0a3256-76ea-434a-b744-31a2be727034","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:22:19][352967355109996][6274 ms][DEBUG] proc_open done in 5514 ms; code=255; res.len=3343 [2025-08-22 23:22:19][352967355109996][6274 ms][DEBUG] END runCmdUntilRes#1 in 5514 ms [2025-08-22 23:22:19][352967355109996][6274 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:28:03][350900920098503][1 ms][INFO] === Request start === [2025-08-22 23:28:03][350900920098503][2 ms][DEBUG] START check_scloud [2025-08-22 23:28:03][350900920098503][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:28:03][350900920098503][310 ms][DEBUG] SU: done in 308 ms; outu0_a118 1228 4970 24359740 171204 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:28:03][350900920098503][310 ms][DEBUG] targetPkg: running [2025-08-22 23:28:03][350900920098503][310 ms][DEBUG] END check_scloud in 309 ms [2025-08-22 23:28:03][350900920098503][310 ms][DEBUG] START check_boot_completed [2025-08-22 23:28:03][350900920098503][310 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:28:03][350900920098503][341 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 23:28:03][350900920098503][341 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:28:03][350900920098503][388 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:28:03][350900920098503][388 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 23:28:03][350900920098503][388 ms][DEBUG] START check_internet [2025-08-22 23:28:03][350900920098503][388 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 23:28:04][350900920098503][904 ms][DEBUG] SU: done in 515 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=201 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 201.727/201.727/201.727/0.000 ms\n [2025-08-22 23:28:04][350900920098503][904 ms][DEBUG] check_internet: online [2025-08-22 23:28:04][350900920098503][904 ms][DEBUG] END check_internet in 516 ms [2025-08-22 23:28:04][350900920098503][904 ms][DEBUG] rawBody.length=1148 [2025-08-22 23:28:04][350900920098503][904 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900920098503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3197\"}'\'' -e'"" [2025-08-22 23:28:04][350900920098503][904 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:28:04][350900920098503][904 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350900920098503\",\"model\":\"SM-A155F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"MEA\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC3197\"}'\'' -e'"" [2025-08-22 23:28:08][350900920098503][4981 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_e8ab9c4c-e7ed-49f5-bc54-87b2a999dec6","id":"QR_e8ab9c4c-e7ed-49f5-bc54-87b2a999dec6","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:28:08][350900920098503][5137 ms][DEBUG] proc_open done in 4232 ms; code=255; res.len=3343 [2025-08-22 23:28:08][350900920098503][5137 ms][DEBUG] END runCmdUntilRes#1 in 4233 ms [2025-08-22 23:28:08][350900920098503][5137 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:32:04][353454191339706][1 ms][INFO] === Request start === [2025-08-22 23:32:04][353454191339706][2 ms][DEBUG] START check_scloud [2025-08-22 23:32:04][353454191339706][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:32:05][353454191339706][312 ms][DEBUG] SU: done in 310 ms; outu0_a118 1228 4970 24479776 181324 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:32:05][353454191339706][312 ms][DEBUG] targetPkg: running [2025-08-22 23:32:05][353454191339706][312 ms][DEBUG] END check_scloud in 310 ms [2025-08-22 23:32:05][353454191339706][312 ms][DEBUG] START check_boot_completed [2025-08-22 23:32:05][353454191339706][312 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:32:05][353454191339706][359 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 23:32:05][353454191339706][359 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:32:05][353454191339706][421 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 23:32:05][353454191339706][421 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 23:32:05][353454191339706][421 ms][DEBUG] START check_internet [2025-08-22 23:32:05][353454191339706][421 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 23:32:05][353454191339706][890 ms][DEBUG] SU: done in 468 ms; outPING google.com (142.250.180.174) 56(84) bytes of data.\n64 bytes from mil04s44-in-f14.1e100.net (142.250.180.174): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.893/200.893/200.893/0.000 ms\n [2025-08-22 23:32:05][353454191339706][890 ms][DEBUG] check_internet: online [2025-08-22 23:32:05][353454191339706][890 ms][DEBUG] END check_internet in 468 ms [2025-08-22 23:32:05][353454191339706][890 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:32:05][353454191339706][890 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353454191339706\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3151\"}'\'' -e'"" [2025-08-22 23:32:05][353454191339706][890 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:32:05][353454191339706][890 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"353454191339706\",\"model\":\"SM-A536U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC3151\"}'\'' -e'"" [2025-08-22 23:32:11][353454191339706][6498 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_1229e7bb-3c9b-40eb-a911-86268a6cfdc2","id":"QR_1229e7bb-3c9b-40eb-a911-86268a6cfdc2","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:32:11][353454191339706][6654 ms][DEBUG] proc_open done in 5764 ms; code=255; res.len=3343 [2025-08-22 23:32:11][353454191339706][6654 ms][DEBUG] END runCmdUntilRes#1 in 5764 ms [2025-08-22 23:32:11][353454191339706][6654 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:39:04][355901957155005][1 ms][INFO] === Request start === [2025-08-22 23:39:04][355901957155005][2 ms][DEBUG] START check_scloud [2025-08-22 23:39:04][355901957155005][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:39:04][355901957155005][306 ms][DEBUG] SU: done in 304 ms; outu0_a118 1228 4970 24615100 192404 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:39:04][355901957155005][306 ms][DEBUG] targetPkg: running [2025-08-22 23:39:04][355901957155005][306 ms][DEBUG] END check_scloud in 304 ms [2025-08-22 23:39:04][355901957155005][306 ms][DEBUG] START check_boot_completed [2025-08-22 23:39:04][355901957155005][306 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:39:04][355901957155005][337 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 23:39:04][355901957155005][337 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:39:04][355901957155005][384 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:39:04][355901957155005][384 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 23:39:04][355901957155005][384 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:39:04][355901957155005][384 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901957155005\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7267\"}'\'' -e'"" [2025-08-22 23:39:04][355901957155005][384 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:39:04][355901957155005][384 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355901957155005\",\"model\":\"SM-S721U\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"XAU\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC7267\"}'\'' -e'"" [2025-08-22 23:39:09][355901957155005][5601 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_4874e2dc-3ea1-4846-9bcd-3f1276ac5916","id":"QR_4874e2dc-3ea1-4846-9bcd-3f1276ac5916","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:39:10][355901957155005][5757 ms][DEBUG] proc_open done in 5373 ms; code=255; res.len=3343 [2025-08-22 23:39:10][355901957155005][5757 ms][DEBUG] END runCmdUntilRes#1 in 5373 ms [2025-08-22 23:39:10][355901957155005][5757 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:44:05][350547661038972][1 ms][INFO] === Request start === [2025-08-22 23:44:05][350547661038972][2 ms][DEBUG] START check_scloud [2025-08-22 23:44:05][350547661038972][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:44:05][350547661038972][295 ms][DEBUG] SU: done in 293 ms; outu0_a118 1228 4970 24795692 203252 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:44:05][350547661038972][295 ms][DEBUG] targetPkg: running [2025-08-22 23:44:05][350547661038972][295 ms][DEBUG] END check_scloud in 293 ms [2025-08-22 23:44:05][350547661038972][295 ms][DEBUG] START check_boot_completed [2025-08-22 23:44:05][350547661038972][295 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:44:05][350547661038972][326 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 23:44:05][350547661038972][326 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:44:05][350547661038972][373 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:44:05][350547661038972][373 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 23:44:05][350547661038972][373 ms][DEBUG] START check_internet [2025-08-22 23:44:05][350547661038972][373 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 23:44:05][350547661038972][810 ms][DEBUG] SU: done in 437 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=200 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 200.620/200.620/200.620/0.000 ms\n [2025-08-22 23:44:05][350547661038972][811 ms][DEBUG] check_internet: online [2025-08-22 23:44:05][350547661038972][811 ms][DEBUG] END check_internet in 438 ms [2025-08-22 23:44:05][350547661038972][811 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:44:05][350547661038972][811 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547661038972\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9072\"}'\'' -e'"" [2025-08-22 23:44:05][350547661038972][811 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:44:05][350547661038972][811 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547661038972\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9072\"}'\'' -e'"" [2025-08-22 23:44:10][350547661038972][5028 ms][DEBUG] proc_open done in 4217 ms (timeout); code=4; out.len=0 err.len=90 [2025-08-22 23:44:10][350547661038972][5028 ms][DEBUG] END runCmdUntilRes#1 in 4217 ms [2025-08-22 23:44:10][350547661038972][5028 ms][WARN] Detected error: Process with pid 1228 either refused to load frida-agent, or terminated during injection [2025-08-22 23:44:10][350547661038972][5028 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c killall frida64" [2025-08-22 23:44:10][350547661038972][5169 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 23:44:10][350547661038972][5169 ms][WARN] targetPkg: not running, restarting 2 [2025-08-22 23:44:10][350547661038972][5169 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c kill -9 $(pidof com.sec.enterprise.knox.cloudmdm.smdms)" [2025-08-22 23:44:10][350547661038972][5309 ms][DEBUG] SU: done in 140 ms; out [2025-08-22 23:44:10][350547661038972][5309 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c am start com.sec.enterprise.knox.cloudmdm.smdms/com.sec.enterprise.knox.cloudmdm.smdms.ui.EulaWebViewActivity" [2025-08-22 23:44:10][350547661038972][5497 ms][DEBUG] SU: done in 187 ms; outStarting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] cmp=com.sec.enterprise.knox.cloudmdm.smdms/.ui.EulaWebViewActivity }\n [2025-08-22 23:44:12][350547661038972][7512 ms][DEBUG] START check_boot_completed [2025-08-22 23:44:12][350547661038972][7512 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:44:12][350547661038972][7559 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 23:44:12][350547661038972][7559 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:44:12][350547661038972][7606 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:44:12][350547661038972][7606 ms][DEBUG] END check_boot_completed in 94 ms [2025-08-22 23:44:15][350547661038972][10620 ms][DEBUG] START runCmdUntilRes#2 [2025-08-22 23:44:15][350547661038972][10620 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350547661038972\",\"model\":\"SM-A225M\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-36\",\"deviceId\":\"SEC109C079AC9072\"}'\'' -e'"" [2025-08-22 23:44:20][350547661038972][15369 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_cf3860a4-0fe8-4607-ae4b-e134d4e7d30b","id":"QR_cf3860a4-0fe8-4607-ae4b-e134d4e7d30b","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:44:20][350547661038972][15526 ms][DEBUG] proc_open done in 4905 ms; code=255; res.len=3343 [2025-08-22 23:44:20][350547661038972][15526 ms][DEBUG] END runCmdUntilRes#2 in 4905 ms [2025-08-22 23:44:20][350547661038972][15526 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:48:05][356130860089049][1 ms][INFO] === Request start === [2025-08-22 23:48:05][356130860089049][2 ms][DEBUG] START check_scloud [2025-08-22 23:48:05][356130860089049][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:48:05][356130860089049][249 ms][DEBUG] SU: done in 247 ms; outu0_a118 4431 4970 23451592 126844 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:48:05][356130860089049][249 ms][DEBUG] targetPkg: running [2025-08-22 23:48:05][356130860089049][249 ms][DEBUG] END check_scloud in 248 ms [2025-08-22 23:48:05][356130860089049][249 ms][DEBUG] START check_boot_completed [2025-08-22 23:48:05][356130860089049][249 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:48:05][356130860089049][280 ms][DEBUG] ADB: done in 31 ms; out [2025-08-22 23:48:05][356130860089049][280 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:48:05][356130860089049][327 ms][DEBUG] SU: done in 47 ms; out [2025-08-22 23:48:05][356130860089049][327 ms][DEBUG] END check_boot_completed in 78 ms [2025-08-22 23:48:05][356130860089049][327 ms][DEBUG] START check_internet [2025-08-22 23:48:05][356130860089049][327 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 23:48:05][356130860089049][827 ms][DEBUG] SU: done in 500 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=202 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 202.432/202.432/202.432/0.000 ms\n [2025-08-22 23:48:05][356130860089049][827 ms][DEBUG] check_internet: online [2025-08-22 23:48:05][356130860089049][828 ms][DEBUG] END check_internet in 500 ms [2025-08-22 23:48:05][356130860089049][828 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:48:05][356130860089049][828 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130860089049\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9634\"}'\'' -e'"" [2025-08-22 23:48:05][356130860089049][828 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:48:05][356130860089049][828 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"356130860089049\",\"model\":\"SM-A556E\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-33\",\"deviceId\":\"SEC109C079AC9634\"}'\'' -e'"" [2025-08-22 23:48:11][356130860089049][5873 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_94d9ed4f-91eb-4bf9-b8a5-df678e201dc8","id":"QR_94d9ed4f-91eb-4bf9-b8a5-df678e201dc8","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:48:11][356130860089049][6029 ms][DEBUG] proc_open done in 5201 ms; code=255; res.len=3343 [2025-08-22 23:48:11][356130860089049][6029 ms][DEBUG] END runCmdUntilRes#1 in 5201 ms [2025-08-22 23:48:11][356130860089049][6029 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:49:04][355344101694282][0 ms][INFO] === Request start === [2025-08-22 23:49:04][355344101694282][1 ms][DEBUG] START check_scloud [2025-08-22 23:49:04][355344101694282][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:49:05][355344101694282][286 ms][DEBUG] SU: done in 285 ms; outu0_a118 4431 4970 23581676 137672 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:49:05][355344101694282][286 ms][DEBUG] targetPkg: running [2025-08-22 23:49:05][355344101694282][286 ms][DEBUG] END check_scloud in 285 ms [2025-08-22 23:49:05][355344101694282][286 ms][DEBUG] START check_boot_completed [2025-08-22 23:49:05][355344101694282][286 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:49:05][355344101694282][333 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 23:49:05][355344101694282][333 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:49:05][355344101694282][395 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 23:49:05][355344101694282][395 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 23:49:05][355344101694282][395 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:49:05][355344101694282][395 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355344101694282\",\"model\":\"SM-G975F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3343\"}'\'' -e'"" [2025-08-22 23:49:05][355344101694282][395 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:49:05][355344101694282][395 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"355344101694282\",\"model\":\"SM-G975F\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-28\",\"deviceId\":\"SEC109C079AC3343\"}'\'' -e'"" [2025-08-22 23:49:10][355344101694282][5612 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_912bd915-8533-46ed-bdd3-42880958c6a1","id":"QR_912bd915-8533-46ed-bdd3-42880958c6a1","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:49:10][355344101694282][5769 ms][DEBUG] proc_open done in 5373 ms; code=255; res.len=3343 [2025-08-22 23:49:10][355344101694282][5769 ms][DEBUG] END runCmdUntilRes#1 in 5374 ms [2025-08-22 23:49:10][355344101694282][5769 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:50:05][358615316177370][0 ms][INFO] === Request start === [2025-08-22 23:50:05][358615316177370][1 ms][DEBUG] START check_scloud [2025-08-22 23:50:05][358615316177370][1 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:50:05][358615316177370][322 ms][DEBUG] SU: done in 321 ms; outu0_a118 4431 4970 23724112 149224 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:50:05][358615316177370][322 ms][DEBUG] targetPkg: running [2025-08-22 23:50:05][358615316177370][322 ms][DEBUG] END check_scloud in 321 ms [2025-08-22 23:50:05][358615316177370][322 ms][DEBUG] START check_boot_completed [2025-08-22 23:50:05][358615316177370][323 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:50:05][358615316177370][369 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 23:50:05][358615316177370][369 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:50:05][358615316177370][432 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 23:50:05][358615316177370][432 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 23:50:05][358615316177370][432 ms][DEBUG] START check_internet [2025-08-22 23:50:05][358615316177370][432 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ping -c 1 google.com" [2025-08-22 23:50:05][358615316177370][730 ms][DEBUG] SU: done in 298 ms; outPING google.com (142.250.180.142) 56(84) bytes of data.\n64 bytes from mil04s43-in-f14.1e100.net (142.250.180.142): icmp_seq=1 ttl=113 time=189 ms\n\n--- google.com ping statistics ---\n1 packets transmitted, 1 received, 0% packet loss, time 0ms\nrtt min/avg/max/mdev = 189.945/189.945/189.945/0.000 ms\n [2025-08-22 23:50:05][358615316177370][730 ms][DEBUG] check_internet: online [2025-08-22 23:50:05][358615316177370][730 ms][DEBUG] END check_internet in 298 ms [2025-08-22 23:50:05][358615316177370][730 ms][DEBUG] rawBody.length=1149 [2025-08-22 23:50:05][358615316177370][730 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615316177370\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4000\"}'\'' -e'"" [2025-08-22 23:50:05][358615316177370][730 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:50:05][358615316177370][730 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"358615316177370\",\"model\":\"SM-S711B\",\"profile_ID\":\"68a8dca9bfb4406906401d66\",\"group\":\"64d1a192-850c-4646-89bd-0f8911279cc1\",\"type\":\"KME\",\"reg\":\"us\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"bio@gup.33mail.com\",\"carrier\":\"ZTO\",\"os\":\"12\",\"knoxSdkVersion\":\" KNOX-35\",\"deviceId\":\"SEC109C079AC4000\"}'\'' -e'"" [2025-08-22 23:50:11][358615316177370][6196 ms][DEBUG] frida res:res:{"href":"https://us-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_c04a79be-cddc-4a8f-a7e6-41ed3409c58d","id":"QR_c04a79be-cddc-4a8f-a7e6-41ed3409c58d","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["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"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:50:11][358615316177370][6352 ms][DEBUG] proc_open done in 5621 ms; code=255; res.len=3343 [2025-08-22 23:50:11][358615316177370][6352 ms][DEBUG] END runCmdUntilRes#1 in 5622 ms [2025-08-22 23:50:11][358615316177370][6352 ms][INFO] SUCCESS response from frida (len=3343) [2025-08-22 23:51:03][350637542643338][1 ms][INFO] === Request start === [2025-08-22 23:51:03][350637542643338][2 ms][DEBUG] START check_scloud [2025-08-22 23:51:03][350637542643338][2 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c ps -A |grep "com.sec.enterprise.knox.cloudmdm.smdms" | grep ep_poll" [2025-08-22 23:51:03][350637542643338][272 ms][DEBUG] SU: done in 270 ms; outu0_a118 4431 4970 23888820 160180 ep_poll 0 S com.sec.enterprise.knox.cloudmdm.smdms\n [2025-08-22 23:51:03][350637542643338][272 ms][DEBUG] targetPkg: running [2025-08-22 23:51:03][350637542643338][272 ms][DEBUG] END check_scloud in 270 ms [2025-08-22 23:51:03][350637542643338][272 ms][DEBUG] START check_boot_completed [2025-08-22 23:51:03][350637542643338][272 ms][DEBUG] ADB: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" wait-for-device [2025-08-22 23:51:04][350637542643338][318 ms][DEBUG] ADB: done in 47 ms; out [2025-08-22 23:51:04][350637542643338][319 ms][DEBUG] SU: ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe"" shell "su -c while [ "$(getprop sys.boot_completed)" != "1" ]; do sleep 1; done;" [2025-08-22 23:51:04][350637542643338][381 ms][DEBUG] SU: done in 62 ms; out [2025-08-22 23:51:04][350637542643338][381 ms][DEBUG] END check_boot_completed in 109 ms [2025-08-22 23:51:04][350637542643338][381 ms][DEBUG] rawBody.length=1148 [2025-08-22 23:51:04][350637542643338][381 ms][INFO] FRIDA CMD: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542643338\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9662\"}'\'' -e'"" [2025-08-22 23:51:04][350637542643338][381 ms][DEBUG] START runCmdUntilRes#1 [2025-08-22 23:51:04][350637542643338][381 ms][DEBUG] proc_open: cmd /C ""C:\wamp64\www\global\scrcpy-win64-v3.3.1\adb.exe" shell "su -c '/data/local/tmp/frida64 -n com.sec.enterprise.knox.cloudmdm.smdms -s /data/local/tmp/kme.js -P '\''{\"imei\":\"350637542643338\",\"model\":\"SM-A135F\",\"profile_ID\":\"68a8ddb7c7840d1f744ab102\",\"group\":\"0aed7e5c-81dc-4deb-b069-bcd1527f3eeb\",\"type\":\"KME\",\"reg\":\"eu\",\"deviceSerialNumber\":\"\",\"scheme\":\"QR_CODE\",\"email\":\"va@gup.33mail.com\",\"carrier\":\"XID\",\"os\":\"13\",\"knoxSdkVersion\":\" KNOX-30\",\"deviceId\":\"SEC109C079AC9662\"}'\'' -e'"" [2025-08-22 23:51:08][350637542643338][4395 ms][DEBUG] frida res:res:{"href":"https://eu-kme-api-mssl.samsungknox.com/bulkenroll/v1/enrollment/devices/QR_3f3a425d-c196-4293-9153-9333cba734a9","id":"QR_3f3a425d-c196-4293-9153-9333cba734a9","management":{"agent":{"href":"http://de.zerotouchcorp.com/assets/RIDMOD55.apk","packageName":"com.promdm.fort","version":"4930","signatures":["308204a830820390a003020102020900936eacbe07f201df300d06092a864886f70d0101050500308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d301e170d3038303232393031333334365a170d3335303731373031333334365a308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d30820120300d06092a864886f70d01010105000382010d00308201080282010100d6931904dec60b24b1edc762e0d9d8253e3ecd6ceb1de2ff068ca8e8bca8cd6bd3786ea70aa76ce60ebb0f993559ffd93e77a943e7e83d4b64b8e4fea2d3e656f1e267a81bbfb230b578c20443be4c7218b846f5211586f038a14e89c2be387f8ebecf8fcac3da1ee330c9ea93d0a7c3dc4af350220d50080732e0809717ee6a053359e6a694ec2cb3f284a0a466c87a94d83b31093a67372e2f6412c06e6d42f15818dffe0381cc0cd444da6cddc3b82458194801b32564134fbfde98c9287748dbf5676a540d8154c8bbca07b9e247553311c46b9af76fdeeccc8e69e7c8a2d08e782620943f99727d3c04fe72991d99df9bae38a0b2177fa31d5b6afee91f020103a381fc3081f9301d0603551d0e04160414485900563d272c46ae118605a47419ac09ca8c113081c90603551d230481c13081be8014485900563d272c46ae118605a47419ac09ca8c11a1819aa48197308194310b3009060355040613025553311330110603550408130a43616c69666f726e6961311630140603550407130d4d6f756e7461696e20566965773110300e060355040a1307416e64726f69643110300e060355040b1307416e64726f69643110300e06035504031307416e64726f69643122302006092a864886f70d0109011613616e64726f696440616e64726f69642e636f6d820900936eacbe07f201df300c0603551d13040530030101ff300d06092a864886f70d010105050003820101007aaf968ceb50c441055118d0daabaf015b8a765a27a715a2c2b44f221415ffdace03095abfa42df70708726c2069e5c36eddae0400be29452c084bc27eb6a17eac9dbe182c204eb15311f455d824b656dbe4dc2240912d7586fe88951d01a8feb5ae5a4260535df83431052422468c36e22c2a5ef994d61dd7306ae4c9f6951ba3c12f1d1914ddc61f1a62da2df827f603fea5603b2c540dbd7c019c36bab29a4271c117df523cdbc5f3817a49e0efa60cbd7f74177e7a4f193d43f4220772666e4c4d83e1bd5a86087cf34f2dec21e245ca6c2bb016e683638050d2c430eea7c26a1c49d3760a58ab7f1a82cc938b4831384324bd0401fa12163a50570e684d"],"icon":"","label":"SAMSUNG ADMIN","adminComponent":"com.promdm.fort.deviceadmin.ProMdmDeviceAdminReceiver","checksum":null},"autoEnrollmentServices":[],"payload":{"mdmProfileCustomData":"{\"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED\":\"true\",\"android.app.extra.PROVISIONING_SKIP_OWNERSHIP_DISCLAIMER\":\"true\",\"dualdar-config\":\"false\"}","authType":"NO_AUTH"},"adminIntegratedFlow":true,"skipSetupWizardForWPC":false},"licenses":[{"title":"ELM","key":"C678DD18B1AA1846BD08D56B91ECB02FB671554DC0A99A42F926B9BFA6CC64B52E9815DDF64CD1ABDA12E3B27A8B14F2D8DDA50E90218AA54C4C11A065E85E37"},{"title":"KLM","key":""}]}\r\n [2025-08-22 23:51:08][350637542643338][4552 ms][DEBUG] proc_open done in 4170 ms; code=255; res.len=3343 [2025-08-22 23:51:08][350637542643338][4552 ms][DEBUG] END runCmdUntilRes#1 in 4170 ms [2025-08-22 23:51:08][350637542643338][4552 ms][INFO] SUCCESS response from frida (len=3343)